DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
82db6207d30728f238fb6f3226c851c7_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
82db6207d30728f238fb6f3226c851c7_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82db6207d30728f238fb6f3226c851c7_JaffaCakes118
Size
119KB
MD5
82db6207d30728f238fb6f3226c851c7
SHA1
8e858ef6de5bb4ea707cde97d46940c633228916
SHA256
ff55decf1c8d424c086bbd11f1424dd36f699346c1faa4093fe67aa2a1938bb8
SHA512
b5a0acb9226a457b42912f09314aa90e8bee46002a771e443e86cb1ded405114b4ab1ff4e92e9ef642663c7b2bfc5102adb7a4931aa61a376291471e15c22815
SSDEEP
3072:WFayqGl2At05SYWTeXbUUydbJAjYGd+GpFJ1Mw2inMzLx:WFL0Q0RWQbubP8nTXEzN
Checks for missing Authenticode signature.
resource |
---|
82db6207d30728f238fb6f3226c851c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ