DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4bd86ec30b73bb4336d141759a733ab1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bd86ec30b73bb4336d141759a733ab1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bd86ec30b73bb4336d141759a733ab1_JaffaCakes118
Size
124KB
MD5
4bd86ec30b73bb4336d141759a733ab1
SHA1
92d0d6c8c5e44f4d3dab2dd36441ee50729b656a
SHA256
d835666bec93cf7d76952c44d0d53d25feab43dc35ec6661df3d236388481092
SHA512
c82f958c1b71353de84e3c08bd3c9e34d89d7d9f2181f9c0bd91e611dacfb7e003967e3921840a0192002fa05ca9548c49c96f95dfd6fb1d3164b2090f053197
SSDEEP
3072:f6iM+vUChqYCPPkUWy/zI1rXkHZkXo+xXN:f65uqRXkUWy/CrT
Checks for missing Authenticode signature.
resource |
---|
4bd86ec30b73bb4336d141759a733ab1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ