DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4beaa1c7864b7879faa43540fd88237d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4beaa1c7864b7879faa43540fd88237d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4beaa1c7864b7879faa43540fd88237d_JaffaCakes118
Size
141KB
MD5
4beaa1c7864b7879faa43540fd88237d
SHA1
6d742da7ede55fc278a8cac491a482710aa8d7ed
SHA256
ee01c440f90ebe8c07e703ef82ed4cfa66cc1f2a4c61397d0ad86bde29d8c194
SHA512
39cd5b92d4ffbe9d79ef4078eac31010c0555da8f5525c60817986fc0eb30fad167825ec4b9ff7fb98ce34c6cff08bd24df519e6b4bc10ad58f6579a8faf79dc
SSDEEP
3072:gSthl9JE6tBlb0PFvlhxe/ZJV/1qR7CKhtTOcLPpDzcQ4ceS3Ca:BO6tBt0PF9mJVdq3DOePmQ4c/r
Checks for missing Authenticode signature.
resource |
---|
4beaa1c7864b7879faa43540fd88237d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ