DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4845bd4e63e7f220d3b44932b52aea47_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4845bd4e63e7f220d3b44932b52aea47_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4845bd4e63e7f220d3b44932b52aea47_JaffaCakes118
Size
139KB
MD5
4845bd4e63e7f220d3b44932b52aea47
SHA1
84bed1bfd4fdb116f075ad49be54c802ae9efcd1
SHA256
8699c48a6d1385b4233f679258cdd0a6ad2b852f4961e6c579831063a7dfb389
SHA512
44beaaf00b6be76965c5373321349e454a4d39698ccf3f98a9156e9eedfc17bbb663f9ddede3ccb92881f2686b1df89e47ed94336a1ba6df5ea468d3d4c985a7
SSDEEP
3072:8T/6fI7gBt8koVSn5mxq3/GBVrSvrX4BncfruoKmU0fLABk8Zdw:8b6fI7IEV2PoZSX42fruzKMBk8Zdw
Checks for missing Authenticode signature.
resource |
---|
4845bd4e63e7f220d3b44932b52aea47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE