DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
676712fb9cf74fa9e54ae2ac643f93da_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
676712fb9cf74fa9e54ae2ac643f93da_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
676712fb9cf74fa9e54ae2ac643f93da_JaffaCakes118
Size
395KB
MD5
676712fb9cf74fa9e54ae2ac643f93da
SHA1
e3ccc0c458c911bdda37c75a1e89ddba174bba84
SHA256
a124e5604380ab129539492d28771eecc5888ca54405301c1d4c720b034a3976
SHA512
f256e544dd08d317764d843dea6724210f8304b3f137e6daa24d29eca1dfa363b3f5f946c47399ac39b45466c858c247afa3de558db767bbda3e7ff97bb68345
SSDEEP
12288:91AXVWfcyXQlBVKd6ouG+vLGNJFQTrIVIJ9CH:AyXQlqMouG+iN8TrwC4
Checks for missing Authenticode signature.
resource |
---|
676712fb9cf74fa9e54ae2ac643f93da_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
GetModuleHandleA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ