DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4446d7e7c156730f3395e1732acb1795_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4446d7e7c156730f3395e1732acb1795_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
4446d7e7c156730f3395e1732acb1795_JaffaCakes118
Size
170KB
MD5
4446d7e7c156730f3395e1732acb1795
SHA1
24bd7579a9ba6ab254beed6e971eaa1b5930fa3f
SHA256
bba6e182ecd8178fb660838fc8b4cabf1c81835ebe93200db23dea67a7581619
SHA512
6f8d20a2d37097f2ef078383e2ef32dc7f27c1bd95094939336fc05ab2df8f5755973e1da64459f1b3daf3e0f3552f073f4ad2fd50e3ed74fc696cb988fdbed2
SSDEEP
3072:eUXlFI6Kkyss2qQwPyEKM3yCFWPusDBdR8ZdCzH/SxwsK1kN22B3szwk1:eMXI6ZyNqSx3yC8PVDBdRaCzH/Sxwn1D
Checks for missing Authenticode signature.
resource |
---|
4446d7e7c156730f3395e1732acb1795_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ