DllCanUnloadNow
DllGetClassObject
dll_inject
Static task
static1
Behavioral task
behavioral1
Sample
664cc5118e0112a9d5575812daedf416_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
664cc5118e0112a9d5575812daedf416_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
664cc5118e0112a9d5575812daedf416_JaffaCakes118
Size
68KB
MD5
664cc5118e0112a9d5575812daedf416
SHA1
2cc16729eeb12f88fd9d00b34c1a2781eb76c69a
SHA256
186e72a4e0ea4eaef7b0e6d86d3bc503b40923ccd20f0f1e76ad3b99ff78912c
SHA512
1b60d979b2cfe616ee126ee6a18fe554884a8a28e280cdbfaf56336ffb828a49a473fc353e32a3d3c38faf1147603d47dfbc99c9eeadccb78a6b433eac18bc75
SSDEEP
1536:9Qo4rI6N4IIe/tk27rq7BHMl7HqAVSyxv7LqIY:98Iq4Ne1k27rsMh9ggqt
Checks for missing Authenticode signature.
resource |
---|
664cc5118e0112a9d5575812daedf416_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
dll_inject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE