DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2b38d05a6fa9abfea934f1982e95d008_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b38d05a6fa9abfea934f1982e95d008_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b38d05a6fa9abfea934f1982e95d008_JaffaCakes118
Size
21KB
MD5
2b38d05a6fa9abfea934f1982e95d008
SHA1
5796cf66fdcf157418e5e7b9b3655c3ee16dab39
SHA256
c9e34803922721a5014abde3b6f6f291f9f3beb7941b09c2c3418e4522e9915a
SHA512
90740612fe124eed1069efe7b68cd06785d73b6487dfdfa7ddcc2cbf33ef4f1f9ec6c7eed052a9dc6fcd9d9e3489fe0f2d7e10761a36f30d6b81b95ffbeb0412
SSDEEP
384:RMkTuwc/UczVvZFUK3eEuxlDobaCG4PTOs5bM+nsKHkgGRV:akascnFwxKauPX5bM+3HkHR
Checks for missing Authenticode signature.
resource |
---|
2b38d05a6fa9abfea934f1982e95d008_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ShowWindow
CreateCompatibleDC
RegQueryValueExA
CoCreateInstance
SysAllocString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE