DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ce77db761301fc83351b00e220f923b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ce77db761301fc83351b00e220f923b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0ce77db761301fc83351b00e220f923b_JaffaCakes118
Size
169KB
MD5
0ce77db761301fc83351b00e220f923b
SHA1
b876aa10a2145fd41de3ecea347ef850b379bbd3
SHA256
f33d97650ba262901ec2bc25ebb2f33a8e634370accccfbd9d0d80bd673b7870
SHA512
e32c4583600533081b578dc7cc96b52f9e145d53ffdf743df548595e3de571045c23366fbc48fd07787896c7ee896f4d3de830b68e1996f8a50f92337656392b
SSDEEP
3072:cCDv4z7W0ZotWQ5OS7pHfxdT+R+W+qJGUE3Zooqk5rkzWycZ289gb8y1jKKxQVlE:QVpQNRbTF4GUEWoX5YqLEmgb8vKWlaOc
Checks for missing Authenticode signature.
resource |
---|
0ce77db761301fc83351b00e220f923b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
EVENT_SINK_GetIDsOfNames
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE