DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
666cc311cdc5cdef7cdc4e27ee000d20_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
666cc311cdc5cdef7cdc4e27ee000d20_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
666cc311cdc5cdef7cdc4e27ee000d20_JaffaCakes118
Size
58KB
MD5
666cc311cdc5cdef7cdc4e27ee000d20
SHA1
0aa8f4819c04d212dc92db560b537c6443504c35
SHA256
d276ff2b741dbe9bf26f31de47e905be9364efd4f773e7356256580ae513f4d5
SHA512
8557c17e1c288bf762e1b2b564b814afbebea3ffc30e70888c434662fff327acec18ea23be2e7b81300cbb5d58b7f77aff6ca111160ba4b2070a97177b082907
SSDEEP
1536:55+vsAEft7Wnk7sUddeO+cLj9vXt6U/j0yyDe1:55+UNtWUde6F6UwxK1
Checks for missing Authenticode signature.
resource |
---|
666cc311cdc5cdef7cdc4e27ee000d20_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
accept
EndDialog
CoTaskMemAlloc
RegDeleteValueA
SysAllocString
GetDeviceCaps
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE