DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
3ff332723c39c9e411976984a2959c00_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ff332723c39c9e411976984a2959c00_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ff332723c39c9e411976984a2959c00_JaffaCakes118
Size
75KB
MD5
3ff332723c39c9e411976984a2959c00
SHA1
64bb8ee3b86538f1fbbd10e327e5a5129df4daeb
SHA256
80b23e88828afb4a0e95c01f0afe2eb390cdb089f64373eb90d834db365e52fb
SHA512
de0b4fc870355c56bb6643b606fec78294a00ce1f4b59156c2f692e8b656204cc16e89324430fd3d5d881b0695995050be8020e61ba6350688e7ce8f623d51f7
SSDEEP
768:Icx2E2Gm4WvuoEo97biafpExI3zh9smBd89vSLDYQTUqYdYTwhV88MIRdgC8:IcsE2Z4WvwoZiuCxYh9X89vEDYFs0JR0
Checks for missing Authenticode signature.
resource |
---|
3ff332723c39c9e411976984a2959c00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ