DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fe1ae2b3be295646878fdd1545a1a513_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe1ae2b3be295646878fdd1545a1a513_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fe1ae2b3be295646878fdd1545a1a513_JaffaCakes118
Size
170KB
MD5
fe1ae2b3be295646878fdd1545a1a513
SHA1
09d58d26ba69c178238db76f8b94c4b16082d216
SHA256
98664a340c09960d8a29f7e68ce41763eec240a9229089bc8ca09953131f3f9b
SHA512
565bb538cea0f00fd5f266139bde4c00de5af44cd9f48ac9d873092ba02d2a361f7927f1daa6c1d9c65333b7fb755c12e93335966589792c1e865e98cec4aa77
SSDEEP
3072:eUXlFI6KIyss2qQwPyEKM3yCFWPusDBdR8ZdCzH/SxwsK1kN22B3szwk1:eMXI6ZyNqSx3yC8PVDBdRaCzH/Sxwn1D
Checks for missing Authenticode signature.
resource |
---|
fe1ae2b3be295646878fdd1545a1a513_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ