DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4171f00d473010f0fc349c4c753784b0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4171f00d473010f0fc349c4c753784b0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
4171f00d473010f0fc349c4c753784b0_JaffaCakes118
Size
455KB
MD5
4171f00d473010f0fc349c4c753784b0
SHA1
19fe790a947d092bb23d25817a03e0ec23c01e15
SHA256
31aadb129d1e45419b25a195d1b86ad230b2d66384300e3c25f6ea9709587f81
SHA512
24689ba6cb65a65368f2beefac99acc4bc7c254241594251441a59a81e3dc8f4bcc8a0d47b3ab5964c6311e63a08056099ce5f6e4d948f425ff989c123677f4a
SSDEEP
12288:SHoD1P6P8lGTcu4XbbWvO1StwaIGE6Ua82Sb2qeFvsJWQTrOl/SN2RGP:SHlcuCJSWaIGrI2Sb2DEVTrOlKNoG
Checks for missing Authenticode signature.
resource |
---|
4171f00d473010f0fc349c4c753784b0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
GetModuleHandleA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ