DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
63694ed0d4368190bf144fd0fd9b6063_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63694ed0d4368190bf144fd0fd9b6063_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63694ed0d4368190bf144fd0fd9b6063_JaffaCakes118
Size
176KB
MD5
63694ed0d4368190bf144fd0fd9b6063
SHA1
9eabcb1a6aa191debb89a677b06ea98658e88828
SHA256
2e1f28acb58110b968fa7f86a0fdde7094409994580395229c751837f989e35a
SHA512
bcb4baa5b279a2cda17d4d63177bde73480688685b6e679cc75547251687beb7626e5c42323ec804dfacb3c8496e08024a2c82f2dceaf009de7a7620bb3d3e38
SSDEEP
3072:/BXLVMhsx5FwYy5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5y5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
63694ed0d4368190bf144fd0fd9b6063_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ