DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eacd37bb52edb66cd6a2ee5e57ebd079_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eacd37bb52edb66cd6a2ee5e57ebd079_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eacd37bb52edb66cd6a2ee5e57ebd079_JaffaCakes118
Size
428KB
MD5
eacd37bb52edb66cd6a2ee5e57ebd079
SHA1
be8e14972b8350496cbf16acc10a65416988fbb2
SHA256
e187c66c54cdff2915e57bf6e16f42b6f32960b1ff36b08c54465092112e7882
SHA512
e104223529da8e591854ffb3d4c569506542b0f76a9dcd07a7433bf1c2d4c230f29a223391ad73528f3d47d120811a90c8e0e29828c067af2cef257c2a020f72
SSDEEP
6144:6vvZmCqfV3ck6OnpmSsreq8W6+hC61AWQFZKDM+dV1061fyBQTBJ9yfqr+W2:2ZmCqNqZnvBg6eZKwurfyBQTrr+W2
Checks for missing Authenticode signature.
resource |
---|
eacd37bb52edb66cd6a2ee5e57ebd079_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
GetModuleHandleA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ