DllCanUnloadNow
DllGetClassObject
dll_inject
Static task
static1
Behavioral task
behavioral1
Sample
418f3139dc1c52b3c2c6cd973c2b189e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
418f3139dc1c52b3c2c6cd973c2b189e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
418f3139dc1c52b3c2c6cd973c2b189e_JaffaCakes118
Size
68KB
MD5
418f3139dc1c52b3c2c6cd973c2b189e
SHA1
2c96484e6ab45b1a3bcecf3810d235248988c185
SHA256
b2339993d190eda649ad0981cab8a150a7770630b9ef361d76b18e16506af8ea
SHA512
e9c98892155e5ba45aef5510de9ed8cebfd997c26ff60aa7ea7f1b47c39f6a9c20bfb93c650925a72f3c9f648777fa220ed423a9b69ae8d9d561d835f73435d6
SSDEEP
1536:cb0JAvAjr8tnyaGisxp4KOF5UTvSDHXtNkXn/Y5AtWXKQI6Pwn5:cYCvAjotyaGiisqTKrvkXQ5AtW/5Pw5
Checks for missing Authenticode signature.
resource |
---|
418f3139dc1c52b3c2c6cd973c2b189e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
dll_inject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE