DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bc9932efe02310de7d0071017faa337f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc9932efe02310de7d0071017faa337f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bc9932efe02310de7d0071017faa337f_JaffaCakes118
Size
108KB
MD5
bc9932efe02310de7d0071017faa337f
SHA1
a3c6ad97c4c89d02e93b95930f5a0655d5d23194
SHA256
247debbb00bd2ecada251776d1773d9c4eecbbfd6c7b0f307347786cc6a727d6
SHA512
8bf5149cf527bc96f10d35949fa16a453c9dd1ecc069039ddbe290a1f16a4c3b4146f10d5f60def4921ba3fd9da75f2d9a99b8b0becf8cede6c2ae8dc08fce11
SSDEEP
3072:9mGC1OsKFkDY1B9wV8anm/G/lZYqeUs+CHM3X6b4:4GC1OsKH9wGImG9+qVs1kg4
Checks for missing Authenticode signature.
resource |
---|
bc9932efe02310de7d0071017faa337f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ