DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
2f5b291fc19e7dad1fe08f00f6b2a4b9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f5b291fc19e7dad1fe08f00f6b2a4b9_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2f5b291fc19e7dad1fe08f00f6b2a4b9_JaffaCakes118
Size
75KB
MD5
2f5b291fc19e7dad1fe08f00f6b2a4b9
SHA1
ad39ba0c90e1d502da851cbd6f3c936c8ca57c35
SHA256
da0e77fb9b3ab2f43c53a21415afacf2569cab49543c28055d7514efec260c6a
SHA512
71f598d2e90c25a085011b1c553d34e498b0d99e7dd217b5972b8af99cb7464c368bade35a0f4221b1ea87e615538f33150a81510eae0c87b6320c70bf3e663d
SSDEEP
1536:IcsE2Z4WvwoZioTc5V6xS0bDISMBkXmDJBl1Oe/Sgi:YE2KawoZioTc5/0+wmDq+Sgi
Checks for missing Authenticode signature.
resource |
---|
2f5b291fc19e7dad1fe08f00f6b2a4b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ