DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
379a24335e2d552b20ac71de03ca214f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
379a24335e2d552b20ac71de03ca214f_JaffaCakes118
Size
47KB
MD5
379a24335e2d552b20ac71de03ca214f
SHA1
4f73067e6aef073ec88f8f7db160424ba3140e2d
SHA256
63e84ffac1b1bef9be7021ec5697a2b77bb8459728822c869b5952697fc29074
SHA512
830e7da6e4411de3b70e729c570da608281f0e4c093a2b4caa02ebc58bb0c5a17d375c27213389d6ea06ad4d3a2528ec667eeef28abb18298febdd5cfdaddb80
SSDEEP
768:UDO6xu9+YlJ3WUa2O2dNm0S0UOUZ07tDiOeujIvZ74Or3Z9XvnIg4XE1dcqU8:z6xuHllWUaHIM0LVIIDzeuI4Or3Z9vn9
Checks for missing Authenticode signature.
resource |
---|
379a24335e2d552b20ac71de03ca214f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE