DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
3918daf3eb88de586db9802bd4aa7ba8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3918daf3eb88de586db9802bd4aa7ba8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3918daf3eb88de586db9802bd4aa7ba8_JaffaCakes118
Size
75KB
MD5
3918daf3eb88de586db9802bd4aa7ba8
SHA1
6be4d2693a580d74551c47344430bcc1f0ecd296
SHA256
8dac36eca2d4df182f40cb4b9611191d862a4be137bbc5ed0a8ad91e6f0648bd
SHA512
31d04b560f4df00f1ebbf433adb217b8f09e0ce19808476acf2f25ad2e34c29ea1da8fc82a3cd2c62dd09d011ddcc9637b9bc499c1f6d81d5886c71523e2b460
SSDEEP
1536:IcsE2Z4WvwoZiwdjJ0fFP60hVKyH4O9CE+XqVS+PNYe:YE2KawoZiwdjJEfhV4Oc6g+Pt
Checks for missing Authenticode signature.
resource |
---|
3918daf3eb88de586db9802bd4aa7ba8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ