DllCanUnloadNow
DllGetClassObject
inject
Static task
static1
Behavioral task
behavioral1
Sample
f6a4b1e9808f579707221d644d3e41c3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f6a4b1e9808f579707221d644d3e41c3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f6a4b1e9808f579707221d644d3e41c3_JaffaCakes118
Size
65KB
MD5
f6a4b1e9808f579707221d644d3e41c3
SHA1
2a47bfc98684a6459383d70d99c04231f174409a
SHA256
cfe5ee74d3ec023e0c47963e8a28cc9f599a36c1ccd2882adb3b33c14726804a
SHA512
9025bb7a425995beb8be6f2baf183d087a9746dff4dddcd756357e35adfa44d938057327ae869b0cc1ab3d11eee51ce6d53cdab3b5d95749046fdb00deccad71
SSDEEP
1536:zPLyAfqtg7iZDIE0BIT7xYRGh0vZKd/CT:zPLyAfqty8EEZ7KGh0v8Vk
Checks for missing Authenticode signature.
resource |
---|
f6a4b1e9808f579707221d644d3e41c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
inject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE