DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
0a22df63d0e78e108641aaa06905a3e7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a22df63d0e78e108641aaa06905a3e7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0a22df63d0e78e108641aaa06905a3e7_JaffaCakes118
Size
75KB
MD5
0a22df63d0e78e108641aaa06905a3e7
SHA1
133f2e0d3810e9002e521fe16d397715576a139a
SHA256
e17db582cdda99dd1f171aa6b2c2072a426476079d6e07cb78e38d7c0ec57643
SHA512
ba858fa8a7b2b4e966af830daf3fb7a1f4d98de10a4b0bb480f67c60ca0acbf7f264d5da2969f8d1676566e574c599befb64c3b218bf5a24914193efe895a481
SSDEEP
1536:IcsE2Z4WvwoZipP77eif6IzeQIoZOyKYrvZpltut:YE2KawoZipzHf65XoZltta
Checks for missing Authenticode signature.
resource |
---|
0a22df63d0e78e108641aaa06905a3e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ