DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
63f1742ef4afa32b403efb642ad481a8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63f1742ef4afa32b403efb642ad481a8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63f1742ef4afa32b403efb642ad481a8_JaffaCakes118
Size
178KB
MD5
63f1742ef4afa32b403efb642ad481a8
SHA1
b5f1a58fa3d3cac37be246502ae1be99d80e460e
SHA256
0ac82592ee82fe1e57041ed40dcbb9e7d3a48d6e5d6dcf73eab42c05cd04d839
SHA512
1818a73ef00d0c3e1b65f3c057191bbc51ee7f3204767cb15e898999240d9e8c2953a7fb511f07bd24c8f1822a3ec3936402d0b656dcebdb3d59525b586afb76
SSDEEP
3072:Ea+nWrGpxvcrKJeHLnPwmGsdbMymUPlfVUMiMsktb9LWu:Ea+WyjeHjY+hMymUPl9aMsktxWu
Checks for missing Authenticode signature.
resource |
---|
63f1742ef4afa32b403efb642ad481a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ