DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d48e5710aa5e953b4f53324d579cef6c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d48e5710aa5e953b4f53324d579cef6c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d48e5710aa5e953b4f53324d579cef6c_JaffaCakes118
Size
32KB
MD5
d48e5710aa5e953b4f53324d579cef6c
SHA1
082fca00c82a20059af3b3630151305995f44983
SHA256
91d123b49b1cd8014c8477d28ab1ca87374b6afd4f58d27c030b1019ebbc0993
SHA512
589d8d8ac2dc1fd1a0a403d99f8545cfea1fa531f9464b4c035907125e69aec58b191dee588c142350843ee6a7062eaf50a0c3f8c8a1f1189da41e371e2dc351
SSDEEP
768:tXT/xp+rEMnBfWIO0GvcCVa1eKM29W2Y0a8CBsW:1/a4sB8yOdK7c2Y0a8csW
Checks for missing Authenticode signature.
resource |
---|
d48e5710aa5e953b4f53324d579cef6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
EVENT_SINK_GetIDsOfNames
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE