DllCanUnloadNow
DllGetClassObject
setup
Static task
static1
Behavioral task
behavioral1
Sample
2f13ad33913f07d11e657a3e095fd7d4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f13ad33913f07d11e657a3e095fd7d4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f13ad33913f07d11e657a3e095fd7d4_JaffaCakes118
Size
59KB
MD5
2f13ad33913f07d11e657a3e095fd7d4
SHA1
e42b1ae3eaf493cb0feb2e068618782a146ed0ad
SHA256
6da1204dd9fe4cdecf0bec05b365017d1159b395eab35f00088c1dc2c2b224b0
SHA512
31ff59d74c4763b3ff8ca50fa9370b0ca5832cd79f68873f2fb94a8d6d3a2ee439839bc66a87db6c71a3691ac762748d0cbc83a6cd055253b257c53ecae7370a
SSDEEP
1536:KpHW2TUT97wv0wSXodkZqwBYMCee0TEyZOZX2v0KClrJT1ai:4W2TUT9M0wS4dkZiAxQy8EClSi
Checks for missing Authenticode signature.
resource |
---|
2f13ad33913f07d11e657a3e095fd7d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
DllCanUnloadNow
DllGetClassObject
setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE