DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
f5d9d1c84a4c2277000de28c649366ba_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5d9d1c84a4c2277000de28c649366ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f5d9d1c84a4c2277000de28c649366ba_JaffaCakes118
Size
25KB
MD5
f5d9d1c84a4c2277000de28c649366ba
SHA1
1a4defe9123d6924c5e60770f752723f20d25339
SHA256
2209c8e2c6188d769c5817ef63adb6662f92991fd6f0db0ac37b0ad1a63646ca
SHA512
6dd92a69f0eda736a4cbdb7e809fa058c8d6c5260fc9ee80dc95b527b389e64f52e348b29ed38c7da7801964cbe55594109b3714c9d433a274b4c538e9c0ac5d
SSDEEP
384:3EGx5QSk5JfmySJjxFS76SAmqQDh79Sx5TzZGS8jK7vvxlLcW2:3EnSk5JfI5SnYQDB9uTH17DA
Checks for missing Authenticode signature.
resource |
---|
f5d9d1c84a4c2277000de28c649366ba_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
GetSysColor
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE