DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2c299c325b75f60b8faccf939eaf9635_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c299c325b75f60b8faccf939eaf9635_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c299c325b75f60b8faccf939eaf9635_JaffaCakes118
Size
143KB
MD5
2c299c325b75f60b8faccf939eaf9635
SHA1
5ae7b004941eecef89f73c8437da09263155ed7d
SHA256
f242917a6e68a2023cf242425704589928f9d5db4ab629774138267b81fde9a2
SHA512
adc8fb1488647f8031636af826b0c59e5fed77b2b1007ad172ecebf4d3a5f3589eab02cec24faa1467b3d3b931246398accc28bc12571963c0a07e5f2da09aef
SSDEEP
3072:gASNXoVXHmFOrl7IuViuw7DP7ws2f8pEdc:gASNXoVXHmm8Uij7DP7ws2f8iS
Checks for missing Authenticode signature.
resource |
---|
2c299c325b75f60b8faccf939eaf9635_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
PeekMessageW
OleSaveToStream
VariantInit
MapFileAndCheckSumW
GetModuleFileNameExW
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE