DllCanUnloadNow
DllGetClassObject
go
setvm
Static task
static1
Behavioral task
behavioral1
Sample
c7da60582e9983185de6c75ab80d519a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c7da60582e9983185de6c75ab80d519a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c7da60582e9983185de6c75ab80d519a_JaffaCakes118
Size
117KB
MD5
c7da60582e9983185de6c75ab80d519a
SHA1
f3dce6a298902446f2ea8d6f1d980a3c165814cc
SHA256
821357fc5e1cb01b40a3591f9b6fff677786ee2b789b461d4c7f5ee612ebd620
SHA512
1d4a341a9ab70187624fdd74575a0a84f8705690697c5c509f0361da7278c333a6e27a3c4a3f95dd406bc3c561cb32a59198c506d001c082e3f925d45ced4c1c
SSDEEP
1536:JzrJZFyUbEnu3yYuak000BfKvvXYPqrGmPJSbD/2SCI6icVUqMaJPfiqf3grCvMf:JvfIcEnLFdfvvo1mRSbD9H65wO/ccMp
Checks for missing Authenticode signature.
resource |
---|
c7da60582e9983185de6c75ab80d519a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InternetQueryOptionA
UuidToStringA
MsgWaitForMultipleObjects
LookupPrivilegeValueA
CoInitializeEx
SysStringByteLen
StrStrIA
DllCanUnloadNow
DllGetClassObject
go
setvm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE