DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
74ad5c8b41d7c0cadb0c1d34162eab3c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74ad5c8b41d7c0cadb0c1d34162eab3c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
74ad5c8b41d7c0cadb0c1d34162eab3c_JaffaCakes118
Size
176KB
MD5
74ad5c8b41d7c0cadb0c1d34162eab3c
SHA1
78a3b355eda0c40e3c9927fb6342636f29f35fb4
SHA256
a631f2712a81dda80baff52230929ec913a4b8d0accd6b49faf8059521ea5bfc
SHA512
c1a1ee7dbe9f5d58398ceba80680c3b3cfb2ddde3254f970f97d323b9c8e7b14e15dff744758a5eaaa777fc9460f3f96e007b0015a5405ecf2612acc13b64202
SSDEEP
3072:/BXLVMhsx5FwYc5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5c5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
74ad5c8b41d7c0cadb0c1d34162eab3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ