DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a95a6cd36083e84066d1bceaa02e0c93_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a95a6cd36083e84066d1bceaa02e0c93_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a95a6cd36083e84066d1bceaa02e0c93_JaffaCakes118
Size
135KB
MD5
a95a6cd36083e84066d1bceaa02e0c93
SHA1
fbc846d42cdc58c45a80c9e4772edd69db4a6bc3
SHA256
690a4dbed6b4d5c65440950622f2b0cdf5d3698688649a7b817aec9e7b813671
SHA512
f0f391b7c1a063068332288208a3c1aa4e4bf51e03dbc164440d2b21c77965b8c9558503eb2d465cc27177de1dc7315c57757d22258f8741890001618d40f428
SSDEEP
3072:7m3QphlFimiyiWwQDQaXAs0X0IYREQnDQ6D9keM2Th5e1:7mgliyiWnXx1I8EQ86BUm
Checks for missing Authenticode signature.
resource |
---|
a95a6cd36083e84066d1bceaa02e0c93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ