DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3cad1ece60777edeb2b003c73f4a1501_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cad1ece60777edeb2b003c73f4a1501_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3cad1ece60777edeb2b003c73f4a1501_JaffaCakes118
Size
146KB
MD5
3cad1ece60777edeb2b003c73f4a1501
SHA1
2346fe908cb34266e7a4af57a982a99c9e66da7a
SHA256
9256f89ca0d700f3921ff556255f8dd3bae932fba2cb37d8a74c35ca166a589f
SHA512
21fc449fcb302e7219ca471a850ab6867c0e8ef45ced8b21d7276c1ed24d109a5fc9e1e9cb2f2a256b0b0ff4429cba30523e33fddb32b435a8da0d1b564675b6
SSDEEP
3072:BPaHZUxuqJxI7fAFNCFnoFpsAApqxbR6O3K7PTlfPN:dLsqcfAFHgq9ALl3N
Checks for missing Authenticode signature.
resource |
---|
3cad1ece60777edeb2b003c73f4a1501_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoGetClassObject
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE