DllCanUnloadNow
DllGetClassObject
DllRegisterServer
GPVyLADpUIoOwLps
LnivRgksnkRGZhhF
TwzSuiOCOVuRCleo
ZtGwCXwFbtZzSctd
ktbufvYjdoQcSTuB
mMiXhlbVDQFceKor
start
vCGwEWIcWLRBSyut
Static task
static1
Behavioral task
behavioral1
Sample
bdf8d1528ae8a5f08962c20824be3a9b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bdf8d1528ae8a5f08962c20824be3a9b_JaffaCakes118
Size
2.5MB
MD5
bdf8d1528ae8a5f08962c20824be3a9b
SHA1
c111ab03e1ccc7b87ee32f22668e10db1daa13c5
SHA256
80b81e6ad77d33bef7d17b77bc11c1127349c49bba1cb898768ddc7683b200e6
SHA512
79f547aadea7da134f2fb57736203e05bc76dbf05332a6a89b1030dd27da98b1c0125aeb3143b1f31bf06809813a907eaff92d031d98c435129615968bea1737
SSDEEP
49152:VoemtTThnjtQ7tIvR5oXOBO1rY59xfeNoD+/0SnGgDEohQRkKELTuFI:iemtTThnjtQ7WIhr4LfCnzDEhk/vu2
Checks for missing Authenticode signature.
resource |
---|
bdf8d1528ae8a5f08962c20824be3a9b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
GPVyLADpUIoOwLps
LnivRgksnkRGZhhF
TwzSuiOCOVuRCleo
ZtGwCXwFbtZzSctd
ktbufvYjdoQcSTuB
mMiXhlbVDQFceKor
start
vCGwEWIcWLRBSyut
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ