DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
start
Static task
static1
Behavioral task
behavioral1
Sample
5bbc6f6bec3e14b3d9514d5e6820f941_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5bbc6f6bec3e14b3d9514d5e6820f941_JaffaCakes118
Size
2.4MB
MD5
5bbc6f6bec3e14b3d9514d5e6820f941
SHA1
1f5db3f8cbd1ed8f44c12f2a3201dab059447fef
SHA256
337941284dec6d55649910fc24cead0602e5f29ab026d99a12153ad09f876146
SHA512
187818ac311ce22e3f5ddb92d9086da13091f0c4412ed90a5d45615f85adb880eab6b4bf6b0564cb94c79560dcf5a12ed90e934564fa968f4b1241be3f69384a
SSDEEP
49152:Z5IOvwJ5SK3AGMhJt2bKc4wYRhp26hbKD0QbtoyRt7KF:ZSOYvSK3TMhJOKyYRe0QJo4eF
Checks for missing Authenticode signature.
resource |
---|
5bbc6f6bec3e14b3d9514d5e6820f941_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
ExitProcess
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ