DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4c56d52cbbdbeecf139174c1d8166888_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c56d52cbbdbeecf139174c1d8166888_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c56d52cbbdbeecf139174c1d8166888_JaffaCakes118
Size
176KB
MD5
4c56d52cbbdbeecf139174c1d8166888
SHA1
348339d4eda8366eab64bcf854630d634681c3ba
SHA256
64577946e093bf1e4d49c7782fe5bcbb7558f56906d7b3bb3abd5cbf67ab2c21
SHA512
7dbacc4c2bf571040e6e1e18e8acc4cf33b9067d32067c3900499bcb49d83b89842ff77106e67baed234d22a4ad03292b2b416abb83eac3b9e1628e99146dce1
SSDEEP
3072:/BXLVMhsx5FwYq5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5q5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
4c56d52cbbdbeecf139174c1d8166888_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ