DllCanUnloadNow
DllGetClassObject
inject
Static task
static1
Behavioral task
behavioral1
Sample
2ca2aa4930c01b9f6e858bfb1d1f5fa4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ca2aa4930c01b9f6e858bfb1d1f5fa4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ca2aa4930c01b9f6e858bfb1d1f5fa4_JaffaCakes118
Size
65KB
MD5
2ca2aa4930c01b9f6e858bfb1d1f5fa4
SHA1
10d63d5bdcb3418d9c2b44974f9a1a49860ef8d2
SHA256
78307e2ffad9cf2ce83707045417764a053555535815d2d2d3e01ecbcc8b3cec
SHA512
8cf9c8af378374a8472055e4acfca803b17b16d2281fbefca128c06881d4f9ac766b4c684db8586a45b2e82f21ac07a8954ca624425b76fce37ab932bf7388f1
SSDEEP
1536:lnK1K3Lv88w/kpdkfvN9iG5JH3GFjjNY3KLOA5ZU7hmC88l6l69:lnR7v88w/kbiN9X32F3yAOA3U7hJ88AC
Checks for missing Authenticode signature.
resource |
---|
2ca2aa4930c01b9f6e858bfb1d1f5fa4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
inject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE