DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fdcc06eef8646083068ae4fbaf8d9460_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fdcc06eef8646083068ae4fbaf8d9460_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fdcc06eef8646083068ae4fbaf8d9460_JaffaCakes118
Size
28KB
MD5
fdcc06eef8646083068ae4fbaf8d9460
SHA1
efa2ca6e207a217aca7a8475076a32b524a690f2
SHA256
a2d54287d0e002c5535a01bf46d2c239057317dce584043adc30afb563208034
SHA512
634140cc95d6efd5ff9ff8b9a9a58a694fd0ca287d664f61cd07288f6576f1ada7d713d0408c4ec4061df5c3c54ca8d2abebebd6020b47222c0376fd3054d5a1
SSDEEP
384:0HvfUDy29zB2zDR9O8ER+M/8FA7Fc/amVlpnnwP71eH49oy77vvxlLvwoWUX8W:AvcDRwExJc/aiwBM4777Dvwe
Checks for missing Authenticode signature.
resource |
---|
fdcc06eef8646083068ae4fbaf8d9460_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
ord21
IASVariantChangeType
ord9
NetUserGetInfo
SafeArrayGetDim
RtlFreeHeap
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE