DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
168512db85e0c109b311b63449bd306e_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
168512db85e0c109b311b63449bd306e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
168512db85e0c109b311b63449bd306e_JaffaCakes118
Size
176KB
MD5
168512db85e0c109b311b63449bd306e
SHA1
7ce44d1167811cb9c6773444ed724254c3686644
SHA256
a5f3242ca6f457774e05ea85e7a4cc958e0ce9e30983e45aee1817ac1708c81f
SHA512
0546b16b6dffe7922717165ae9257652584a3d7da324db8c6ca08d755d208900d4906ec594b226a210ad7dae542fc3c56cddeeb4bb4f3e7a7464d155ac158e25
SSDEEP
3072:/BXLVMhsx5FwYX5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5X5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
168512db85e0c109b311b63449bd306e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ