DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dff9c4bd539654a4f67230476975497b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dff9c4bd539654a4f67230476975497b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dff9c4bd539654a4f67230476975497b_JaffaCakes118
Size
198KB
MD5
dff9c4bd539654a4f67230476975497b
SHA1
625edf0353ec5cf27323fa12f63505e7b3c66ffb
SHA256
181c676b1305cf1c6a13d9c0f6fb1404658ce47e4b10d7e5813ecddf96cd7221
SHA512
6d93a1e179dd36cca20147a75b647b24cfc8cd9247843b88a547fc63ae389c011671f1d65f8554d1c3ad98b76f500f6cb1e0d1789c16a4d6357f82dce10d603d
SSDEEP
6144:akX5rfJ3CA82YmfdQHU6IWG79Fa+zlA03lzdR:akX5rR3nrH+HU6IWerzl9X
Checks for missing Authenticode signature.
resource |
---|
dff9c4bd539654a4f67230476975497b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlUnwind
LeaveCriticalSection
GetACP
GetLocaleInfoA
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
GetLastError
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
EnterCriticalSection
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
CoInitialize
CoGetClassObject
CoUninitialize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ