DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2e160702ab7c78b7dd560b8e6fd81f03_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e160702ab7c78b7dd560b8e6fd81f03_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2e160702ab7c78b7dd560b8e6fd81f03_JaffaCakes118
Size
158KB
MD5
2e160702ab7c78b7dd560b8e6fd81f03
SHA1
8a7ce432a8a5f2dde3a7b6c435abdded87c71bc0
SHA256
488e1f2546b2e90885a849a0dac0cf9c72ee0e512695737f53932be4025b8417
SHA512
a987f2a0f6ccef998cae9dc4e05418d9ec58bdcbed43b302d98f48d588f13605c18ddb4d1300532d66ab87efb5d146ac81a574a38a268d51cd3c574bd8e8682b
SSDEEP
3072:N+ZqrzXT9XQ2jzZyz2tKM6q9uklOrlTA2FJSO8cEK/inbeFbbQW:NOqbtQmZ1NuklO22FD8EIbcMW
Checks for missing Authenticode signature.
resource |
---|
2e160702ab7c78b7dd560b8e6fd81f03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE