DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4a7996e901b4736545ed02b02d5f86c7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a7996e901b4736545ed02b02d5f86c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a7996e901b4736545ed02b02d5f86c7_JaffaCakes118
Size
183KB
MD5
4a7996e901b4736545ed02b02d5f86c7
SHA1
3f24f85cd436a380680bb713bf95cf77bb596450
SHA256
f216e6f0690847dd25f88d09696bf10cc434ae3475fbc2c406f764f9733b596a
SHA512
268224d16976fd11db6f72edcc29f6edab2b95a8ff140380142677942a3602d5c6c77aaf9567d8f18917edfd69d2a2d633cf1bb40a3f647c6b53da6f4b369e1f
SSDEEP
3072:e+EtE+7ha7yK5Taj9DzdVi4eSBBy77eFCAaITD602uxHBzfdmW9FM4y4Ie5gtiTE:e+CE+dsajjw0X120TxHVf3nMbiTE
Checks for missing Authenticode signature.
resource |
---|
4a7996e901b4736545ed02b02d5f86c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE