DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e1171821ee7abe3d0e229fa39f3fc432_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e1171821ee7abe3d0e229fa39f3fc432_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e1171821ee7abe3d0e229fa39f3fc432_JaffaCakes118
Size
33KB
MD5
e1171821ee7abe3d0e229fa39f3fc432
SHA1
f58890251a9b84819c4462d6af2bddb256ee8772
SHA256
4904a1d040a26b72eb182987b07e601de65d4307450e6596c9757c4786302a7c
SHA512
4f879c516230e7133e5bc38e09d9edcc32a1daaefe645b8b36a7ff5f74f3ce88832cfb102b323b5e5b5871c890a570f8df86f908c44c28e10896919d0dc99447
SSDEEP
768:s8VuS48/gJx0Krui8PwaF7ZYBJ9wjQEf74C7DQ:sJNb0cuZ7Zq+xfA
Checks for missing Authenticode signature.
resource |
---|
e1171821ee7abe3d0e229fa39f3fc432_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
ord588
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE