DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
af6495c39f537581a44f76956e95bf70_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af6495c39f537581a44f76956e95bf70_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af6495c39f537581a44f76956e95bf70_JaffaCakes118
Size
126KB
MD5
af6495c39f537581a44f76956e95bf70
SHA1
c5eb1fbea31b2053f31738f2399013c8666c5a3c
SHA256
f592405a17bb4df94245eaa3b6272fa770603b2b1125fe543c0f35cc9531878c
SHA512
9b5359eec8f6267d68aefc4c90334519eed87354d0bd4fd845be42356f1e639cd09ebdbc8cc14441124463d330af071031d1e148fca42dacd8293c7015cd9633
SSDEEP
3072:zxKGl8aNGfb3cdBHIwiSobIDg0DnrYZsVT9r3YMc:9zQzsdedS2aJTcZZ
Checks for missing Authenticode signature.
resource |
---|
af6495c39f537581a44f76956e95bf70_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ