DllCanUnloadNow
DllGetClassObject
inject
Static task
static1
Behavioral task
behavioral1
Sample
c8dc15135451b6d26e10ebcf1e6a57af_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8dc15135451b6d26e10ebcf1e6a57af_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8dc15135451b6d26e10ebcf1e6a57af_JaffaCakes118
Size
65KB
MD5
c8dc15135451b6d26e10ebcf1e6a57af
SHA1
d56a41505d506d453eafa402417a40d58a245d18
SHA256
e486de8e62510bcf9cddadf996c743d32747129285c3cc1545bdb9ac181633f2
SHA512
2f6226f035641338a84095b9a3910c6a2cc584cd21b9285168a1e1000e77ae36f94bcb7affa7f6e652f9b7b17ab23e076e9ea928114b16c4e2d71e89fd87efe9
SSDEEP
1536:Tyh5n+sRmR6RIdvudZME11Zc7vcTOOSK/7/G:Q5+4u6wSVU7vL+S
Checks for missing Authenticode signature.
resource |
---|
c8dc15135451b6d26e10ebcf1e6a57af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
inject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE