DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aee50f86f671d01cb60db29abbd472a7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aee50f86f671d01cb60db29abbd472a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aee50f86f671d01cb60db29abbd472a7_JaffaCakes118
Size
170KB
MD5
aee50f86f671d01cb60db29abbd472a7
SHA1
0d31b23d308c885aac0d09379cbe6fa9e5966f87
SHA256
3f69f3dcaaf1162cc7b7a1f1d84c90aac4deb1378dbdbc3048009d07b46c99f2
SHA512
8fc17edbf1fd3350f912944a2864d185a11f61e7df4873c404d1d2e61a8a1915ffa69d77bb8a56aaaaffd904d0883508fd8bbd910c322a5c640f12e6c7c901da
SSDEEP
3072:eUXlFI6K6yss2qQwPyEKM3yCFWPusDBdR8ZdCzH/SxwsK1kN22B3szwk1:eMXI6vyNqSx3yC8PVDBdRaCzH/Sxwn1D
Checks for missing Authenticode signature.
resource |
---|
aee50f86f671d01cb60db29abbd472a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ