DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9ffffe7d3e34633b052d16812926671f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9ffffe7d3e34633b052d16812926671f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9ffffe7d3e34633b052d16812926671f_JaffaCakes118
Size
123KB
MD5
9ffffe7d3e34633b052d16812926671f
SHA1
ff9a53a191189fed8a70a26aee79b58327de47e8
SHA256
2f12cfe6e302e050b61e6f86a4cbd281fd3349c8c909dec8d22787e11573854a
SHA512
503bce5abcc6f4397c9cbc0bdfdc39ab13d75a4626d5efb2decafe3c2ae332f43c637e64abbc1013f53890fbe4e4c0b601e9d25a1d39860cd88c62a7b4f5ce00
SSDEEP
3072:mT8tkliYFC3yaLrMHPqNPhMmvXUGHBmPbMHzIdB:m1FqyRaZMKhqMGB
Checks for missing Authenticode signature.
resource |
---|
9ffffe7d3e34633b052d16812926671f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE