DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
253bc81110b54fbdae3e41e212ccd9e6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
253bc81110b54fbdae3e41e212ccd9e6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
253bc81110b54fbdae3e41e212ccd9e6_JaffaCakes118
Size
176KB
MD5
253bc81110b54fbdae3e41e212ccd9e6
SHA1
a97b0e4e93658dac2846005341a07639a164e296
SHA256
83aa1d2f43dca7823059b1ce0176684f4a42c87b13bebe521aa2631ff4817228
SHA512
aeeb15d2156257627ec0194b3203eae1b37059170af5629098f8a0d979cfbd3525f90fb882b029c0a53c39d5b59fe1e399aa42910e4cd7a8cff5417df01e8e88
SSDEEP
3072:/BXLVMhsx5FwYG5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5G5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
253bc81110b54fbdae3e41e212ccd9e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ