DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d8d80e51473213bc25e74bcdf9c7607_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d8d80e51473213bc25e74bcdf9c7607_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d8d80e51473213bc25e74bcdf9c7607_JaffaCakes118
Size
42KB
MD5
4d8d80e51473213bc25e74bcdf9c7607
SHA1
d7eb4762caac5fa013cfef3223dc0901ff3e1492
SHA256
61deceb1b7264be5645fda738a9042d25e45f27070a745ceee2b52cf46c9011c
SHA512
d7fcd865ebad2cfa87756b70ed507c8339964c783fd5986c71ee11ed9d24b725d44dc29881f9f7ad243a51dabd8f08284221834931481947a35639e162e182af
SSDEEP
768:KWKVPB/fYgKRwpPVKqQQ1+aNethlxSt5UXgNo:KppA9U+CgxStLo
Checks for missing Authenticode signature.
resource |
---|
4d8d80e51473213bc25e74bcdf9c7607_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
FreeSid
SysFreeString
CharNextA
send
DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE