DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
68366c4c80586caa07450273cb3cc8b8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68366c4c80586caa07450273cb3cc8b8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68366c4c80586caa07450273cb3cc8b8_JaffaCakes118
Size
388KB
MD5
68366c4c80586caa07450273cb3cc8b8
SHA1
2c1a43336ed78ab57f592dece83a61e3020a3720
SHA256
2ee7011727ffd49cd3df5011d72173dded51b550291b519be49b5d6f54df2ab2
SHA512
874c44d1dc6ae9363624481a270064957a8de6f5ee904d12bcc75d49a1dc6108df4b68fe44c58729d7cee495e44f5e32d7aabf2b4a6f4270dff56881cfebaa14
SSDEEP
6144:f7dgzOjnzzvGyifPgCEsGJazQKnLXjlJxuXsylFQTBJgoNhb6cA6A:f7hifoCEsHzQKnFJxucyvQTrnhb6cAt
Checks for missing Authenticode signature.
resource |
---|
68366c4c80586caa07450273cb3cc8b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
GetModuleHandleA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ