DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
start
Static task
static1
Behavioral task
behavioral1
Sample
5d571ce5ae8550dea98da056ca10d54f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5d571ce5ae8550dea98da056ca10d54f_JaffaCakes118
Size
2.3MB
MD5
5d571ce5ae8550dea98da056ca10d54f
SHA1
c93bb416c7d880e1607f168d75d27c03cec8ad24
SHA256
58a07c3c19d4b6e478dda9f3fc76feb8a8a5d3fa1c41ce24dde9e1327f2dc6bc
SHA512
44cdf433385eb29df770933d85d6e33055004e7361339db69b7025ddd651f451cfcece9b98f5dbaec5947d5e2ffb3a8a416da65f0cdf62de3cb7297e22497acb
SSDEEP
49152:vhxTNwJ5SK3AGMhJt2bKc4wYRhp26hbKD0QbtoyRt7CF:v7TOvSK3TMhJOKyYRe0QJo4WF
Checks for missing Authenticode signature.
resource |
---|
5d571ce5ae8550dea98da056ca10d54f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
LoadLibraryA
GetProcAddress
VirtualAlloc
GetModuleFileNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ