DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
452550a472b002ae987098031ed94d8a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
452550a472b002ae987098031ed94d8a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
452550a472b002ae987098031ed94d8a_JaffaCakes118
Size
176KB
MD5
452550a472b002ae987098031ed94d8a
SHA1
82ed9098adee6ad6fe1fd51ab612ab81a6898f72
SHA256
70bf13594567257979ec7772da09c58b84ffea791faad2933b7cceb469cb6d16
SHA512
b80ea12b7ba77909eab1676f8074caba1bcb5dccdf241395db6e6c4e607141be83c10885bb9db289603955d9b0cf89953c53a17d885e656257fe1b9dd249fbe4
SSDEEP
3072:/BXLVMhsx5FwYG5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5G5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
452550a472b002ae987098031ed94d8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ