DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c4014eff0e9a20fc54f2a90aff25314_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c4014eff0e9a20fc54f2a90aff25314_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c4014eff0e9a20fc54f2a90aff25314_JaffaCakes118
Size
156KB
MD5
3c4014eff0e9a20fc54f2a90aff25314
SHA1
8a735c9bcb7abf639f20bf1b23b15f4ee7f195c3
SHA256
1eb8a7182bfbf86cb8aeaf00ff7b65cf3318e0e461a0ece6260243286c52919b
SHA512
8ab926fcbc9df07f314a28012d19894de13ee9fd627ff7f8d5449b9df17a79470c8c03d7d4502c55ddd97d57eb32d9c82711d6ef98757a4216bbe4aaab8c4a14
SSDEEP
3072:WSxsRErB9OdIPY5ye8ZghbLI76xezq7xBywbLTE1PdrNzV5Ds38IlA:VWRErB9O6A5yeCghHb1xBy4vErrf5D8Q
Checks for missing Authenticode signature.
resource |
---|
3c4014eff0e9a20fc54f2a90aff25314_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE