DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b31149acd5c62462e51d2e89b238a2e1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b31149acd5c62462e51d2e89b238a2e1_JaffaCakes118
Size
477KB
MD5
b31149acd5c62462e51d2e89b238a2e1
SHA1
f95a13d36a05b95b17a74160023e544326f0f416
SHA256
b27b71f8cbb67382be2f0b90867e3c9363b92e3418c80e158af44389a9d537c4
SHA512
9dd2b6e696b8d81d059a078e068ca443fa03867af1edcb29c749210fb20c456c1fb84511d7738ccffbc1eb892c12d6bb5abf7238249d7fda608d32b2711a9cc6
SSDEEP
6144:U3wgIISOYz/+AaY7uBLG1J13XqF2HmHSqDnSYq3fB129b2Tr5sevN2m0cXc/h:U3rs/+Aa9ZHS2Shfm1KdFYmop
Checks for missing Authenticode signature.
resource |
---|
b31149acd5c62462e51d2e89b238a2e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ