DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8a05e78bce28a30a76591d3cd91309cc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a05e78bce28a30a76591d3cd91309cc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8a05e78bce28a30a76591d3cd91309cc_JaffaCakes118
Size
170KB
MD5
8a05e78bce28a30a76591d3cd91309cc
SHA1
fd453d5d7826318bb7d1d9637dc3bea2f62e5cf4
SHA256
6a1e229267727111ab9f2c79973afe095ffebbc8a8cb14d5fa723ac231704d55
SHA512
e537c173b7721d12b0bc2115fb184bfbf96181e59b8433fbffb545fd550411ff9e28ea6f3630ab84d933e1dbfe069f23d3d8dcf790f71547f1a3f3fc6fdc1940
SSDEEP
3072:eUXlFI6Kbyss2qQwPyEKM3yCFWPusDBdR8ZdCzH/SxwsK1kN22B3szwk1:eMXI6iyNqSx3yC8PVDBdRaCzH/Sxwn1D
Checks for missing Authenticode signature.
resource |
---|
8a05e78bce28a30a76591d3cd91309cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ