DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6075e2de34b25f864522b1960aa4aa0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6075e2de34b25f864522b1960aa4aa0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6075e2de34b25f864522b1960aa4aa0_JaffaCakes118
Size
41KB
MD5
b6075e2de34b25f864522b1960aa4aa0
SHA1
b3ef1e3e40b00e6a8e641bb7b8fd95c5ccdb1d77
SHA256
15b0a328c44f4e2022db12e981b46dfef2d4989582d43e911cfd76cf2b392fa2
SHA512
46f398f8e5a6f84f2dd8cc25156016dc6635e59be8b8857e21510b6ccf1ff765c0b905e34b542c54af67944b630a811d1fd531eb0249208fb4d3a0f3de5b0ab8
SSDEEP
768:EwGVzA2ePYyP/jR58YOkWx886I7E7YEmKDdqW/1O4x:y1LeF38WF8/7DUDcW/N
Checks for missing Authenticode signature.
resource |
---|
b6075e2de34b25f864522b1960aa4aa0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarTstGt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE