DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a9259ccd4498b44b5948465e0b4b837d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a9259ccd4498b44b5948465e0b4b837d_JaffaCakes118
Size
475KB
MD5
a9259ccd4498b44b5948465e0b4b837d
SHA1
48581ea75ce8326ca873e1289c16c8e8135124b4
SHA256
2ece3839b4b8cb3cb827755bdf9e2698802d77cba2e7f00e9a342295144600c3
SHA512
4e52142f77eaa7a289743a560c2aaf24e4f1bbdd089801f60a14551747bba8fea911ad201a102be1c8394bc691625b043874fc3f7a510f532fe601b59a153a0c
SSDEEP
6144:E3CNH/pSyPCoHfS4Zo/WxCUztrdXo/7gn7PP1LaLIPZyXTrTr5seXZKg4Xg9Qpl:E3Cd6oRZo/k3trdX0OSIPUX7dFofpl
Checks for missing Authenticode signature.
resource |
---|
a9259ccd4498b44b5948465e0b4b837d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ