DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Id
Ld
St
Ver
Static task
static1
Behavioral task
behavioral1
Sample
2ff1492e35861df9c2c41cfc584d7924_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ff1492e35861df9c2c41cfc584d7924_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ff1492e35861df9c2c41cfc584d7924_JaffaCakes118
Size
38KB
MD5
2ff1492e35861df9c2c41cfc584d7924
SHA1
d9fa86d824a8d2642e3f5a17c0884fd606dbf69e
SHA256
65b483e3414191153790fe0c7ed0c43985521004df3c627118882ece318e60fa
SHA512
ea7081e69d81866bc426c84c0f0c6a2dc879db9282130f5c4a15708e1a6052b44eda9564347e0ad9d72336b4315b092d64c77c24890e268c3e75a415b0f606bc
SSDEEP
768:HR2sAKaoPI49ykoneS3xWRb2z2c85lSPjELVhMQN8TM9CS:H02249ykwv3xKS2cnERf0S
Checks for missing Authenticode signature.
resource |
---|
2ff1492e35861df9c2c41cfc584d7924_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Id
Ld
St
Ver
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE