DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
43b2bfeba8e380f5c0506af09b9f4833_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43b2bfeba8e380f5c0506af09b9f4833_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
43b2bfeba8e380f5c0506af09b9f4833_JaffaCakes118
Size
86KB
MD5
43b2bfeba8e380f5c0506af09b9f4833
SHA1
394d5bb4194cfbf56baa00f18c591bb1db023d59
SHA256
56bd903dd79bec4ffc0eb464e98e108c5c7341fccd95fe8447e91ee9d2a33f7c
SHA512
0ca4748554f94714211c909340a54e93034218d7c39c8e59ad17e827fb0f033dfacf0f6c13b913c46722dc1def16623a3faba75443b4e79fc10031be472def8a
SSDEEP
1536:4S/JAv9HcAcjGZGy6sEw1mrfF/JXcBnbiCEHKGFXRO5QDfnqPjjiTnp8e7utcv+C:rxqHcA+Ggy6sE3FhXc1biNVFhEQrqPju
Checks for missing Authenticode signature.
resource |
---|
43b2bfeba8e380f5c0506af09b9f4833_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE