DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8e41045bbc23d1140fa75cc0e80328ae_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8e41045bbc23d1140fa75cc0e80328ae_JaffaCakes118
Size
475KB
MD5
8e41045bbc23d1140fa75cc0e80328ae
SHA1
b1719656504e8fbe3dabbed51a58bd66d29e412f
SHA256
54b01ec577073fa88186e573dfd4b31f2cfcc0ba831c33531996932faf331adc
SHA512
06a1f225d055c17c4cc0d6aea2f520078b9944393f6b1cd7719a556d38585966758839a34383ed512233a9450bf3db31f8d422ca3a4f4f6822bc0d9a2a13503d
SSDEEP
6144:53v4k5/iS9ifl5uNpNz/gwq2AGy+92c12G5usseHxyzITxF0r+jrTr5seXZKg4Xf:53v4HS9il5uJpFDJVRWeHuITxSGdFoD
Checks for missing Authenticode signature.
resource |
---|
8e41045bbc23d1140fa75cc0e80328ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ