DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a73e13c9756d90b458a8bcdb8aa8b904_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a73e13c9756d90b458a8bcdb8aa8b904_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a73e13c9756d90b458a8bcdb8aa8b904_JaffaCakes118
Size
186KB
MD5
a73e13c9756d90b458a8bcdb8aa8b904
SHA1
a74b75955c8371690a3a640909b8b4e296c58947
SHA256
fcbe8dbf22a3e447af4c18254f53700feb21198aaca6eea21ea3fd3d963ce909
SHA512
b4bcb846ec7e5e751c6f7fc0719cf817182fafbbee5468362de6a9bb9d87b2e50049d8a56fb6cd8ed74d9786cfa54139a83784343617198e998beee0a60df9b2
SSDEEP
3072:DbxBSAA7MsV3wiA1NP5jUzl5bp0SlhwcQtCQNHhU25ByRK0Ny78a5ICQOp3Zg:DbxsT7M83wDTPli1p0SlepHC25kBpcpg
Checks for missing Authenticode signature.
resource |
---|
a73e13c9756d90b458a8bcdb8aa8b904_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
FtpDeleteFileA
GetClientRect
AdjustTokenPrivileges
SHGetFolderPathA
StringFromGUID2
VariantChangeType
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE