DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
41c4840e7e17b93b3cae9c642b20d95e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41c4840e7e17b93b3cae9c642b20d95e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41c4840e7e17b93b3cae9c642b20d95e_JaffaCakes118
Size
75KB
MD5
41c4840e7e17b93b3cae9c642b20d95e
SHA1
5fc12021a6bd21ad590c93ba362697354e56c2a7
SHA256
2cd464d525b9be300638630d1c3e08264f57f52681831810f64380258a5afdbd
SHA512
9d4ccef3e58cd105099e6069e1368539a3c72d6328eaa192f1f1a22e3bd9fa464e8934722175b87a00ee7629af7ea5fa2d1386677f39b249c5738ee95f7685b3
SSDEEP
1536:IcsE2Z4WvwoZi5TeXJD0G4iI/yOAOxRE6GzTtR3e8DB3oo:YE2KawoZi56JD0AFaBohR3eeX
Checks for missing Authenticode signature.
resource |
---|
41c4840e7e17b93b3cae9c642b20d95e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ