DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5bcba5e388292b0c042fa3b62186ffe8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bcba5e388292b0c042fa3b62186ffe8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5bcba5e388292b0c042fa3b62186ffe8_JaffaCakes118
Size
176KB
MD5
5bcba5e388292b0c042fa3b62186ffe8
SHA1
c3e389a2e4e0e6c0ae17fbff34670bc0e0a2f7b4
SHA256
57faf4488b55ad752562a2126de962c9884fcebc2c0b45ce8614f1f74af8d27d
SHA512
e3f2f24287d14acfb778537b000df06619ea80d96fc543dba93479d203bfc585fece0506f8fae68aae1d1e643eb3d084e29b92ae83dd4fc047d9ba93cc6b1829
SSDEEP
3072:/BXLVMhsx5FwYH5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5H5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
5bcba5e388292b0c042fa3b62186ffe8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ