DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
177079098c3dfc69aa4d5f712f954285_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
177079098c3dfc69aa4d5f712f954285_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
177079098c3dfc69aa4d5f712f954285_JaffaCakes118
Size
170KB
MD5
177079098c3dfc69aa4d5f712f954285
SHA1
36488f151aa29e8aa3d3505e81ce7d981f6a2f95
SHA256
ec893f30f928e75969da962ece2a5f8d19dfb34e7755f4b167fe2a9dab2c2f96
SHA512
e5b4b09090c85117b34e4fc4d1b1fc2ad4624d766351b4936cbf0b1b769661178cfb9b1af123c0a06e129dfdf0aed41cc347ca60ec58ef680f535e8b9c1ef097
SSDEEP
3072:eUXlFI6KHyss2qQwPyEKM3yCFWPusDBdR8ZdCzH/SxwsK1kN22B3szwk1:eMXI6CyNqSx3yC8PVDBdRaCzH/Sxwn1D
Checks for missing Authenticode signature.
resource |
---|
177079098c3dfc69aa4d5f712f954285_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ