DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4c4469b57c308227e56faca019d0d229_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c4469b57c308227e56faca019d0d229_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c4469b57c308227e56faca019d0d229_JaffaCakes118
Size
97KB
MD5
4c4469b57c308227e56faca019d0d229
SHA1
e9acd1177f22e2b1ade46711ee23f9622ae84695
SHA256
e40e711247dabb0af17137fbfe3bd9bb67fce0c93d3bce1e71255389a95a9049
SHA512
6345a8d231af5ee8fe90d82e6a1d78885452528ec65bd0178b9311bfbb396c4e53c000ee356525fb5101a8b2a6cf521f0c7011c1ecfe04051efc929f399faa3d
SSDEEP
1536:KANsd/+UdHK2+6lKDMtheePGzFn3++GBq+jSc95IUTCJDSGStLYHtRu8m+r7O08P:JsdGIHG5KOzB3+htjSc9bwD5eLYNREP
Checks for missing Authenticode signature.
resource |
---|
4c4469b57c308227e56faca019d0d229_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ