DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
2ec20511ccb4127f83a4fb5acbf5d017_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ec20511ccb4127f83a4fb5acbf5d017_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ec20511ccb4127f83a4fb5acbf5d017_JaffaCakes118
Size
75KB
MD5
2ec20511ccb4127f83a4fb5acbf5d017
SHA1
c9b28964acdbc3b7f9db54e6f150be57fa7984c0
SHA256
eea1574da8c57f096adaf2117cce35b6a74f9195d7d4320b6c27ec6f9de03618
SHA512
7241897fb3f8d74ce312832626a2340290e007b60f039d1d9ba412dd80d6701bf7ece668cdd845963381e4e69f4469d99cc3e9fbea8cc4a71485dd0d114dbca0
SSDEEP
1536:IcsE2Z4WvwoZiFgWrGYbG03vP654gNoyONPoQU7:YE2KawoZiFgWrGSzHE4go3O
Checks for missing Authenticode signature.
resource |
---|
2ec20511ccb4127f83a4fb5acbf5d017_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ