DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a8e76aed82d72f1b9e9be90beb3b0562_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8e76aed82d72f1b9e9be90beb3b0562_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a8e76aed82d72f1b9e9be90beb3b0562_JaffaCakes118
Size
22KB
MD5
a8e76aed82d72f1b9e9be90beb3b0562
SHA1
6d1bd95bb36360d1343acd29a6c08ee8ffce847b
SHA256
cfad539b1c4f71f3e4a5ad134cc7f0df9e37f3e22241997081efde03f5a3fe85
SHA512
47c635ecf3c34101020a87e469b69cd19ff53950fc887842fef618c2fa0f7fa55610e444de0dcd2147da7ae7903f6b204fab4d255ee279388cfe30ac8eb9917c
SSDEEP
384:RnSPnjByhgKpOYq2bbiMyUxCt0N8jER9Yuk/pLoYHFKW:tSb0KKpFbIUxz8jER9kRr8
Checks for missing Authenticode signature.
resource |
---|
a8e76aed82d72f1b9e9be90beb3b0562_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnregisterClassA
RegDeleteValueW
StringFromGUID2
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE