DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
45205b46394ebe431385a677c1a3e27c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45205b46394ebe431385a677c1a3e27c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
45205b46394ebe431385a677c1a3e27c_JaffaCakes118
Size
170KB
MD5
45205b46394ebe431385a677c1a3e27c
SHA1
60947873b1191245dc3f9ed046f06037a31a8dc1
SHA256
fae0a504791b966b2783e16ed5119474eb3cfa41889ddfc182cd8dd5ce7ce33e
SHA512
141086d830c713cdc05dfc847f7e7f1f2095a776933c2ab332af16561c941a0cafc16b026cc7e6c8b3caf25ff4aa12d6924b043c400f8e9a64ecbd8ca846108a
SSDEEP
3072:eUXlFI6Ksyss2qQwPyEKM3yCFWPusDBdR8ZdCzH/SxwsK1kN22B3szwk1:eMXI65yNqSx3yC8PVDBdRaCzH/Sxwn1D
Checks for missing Authenticode signature.
resource |
---|
45205b46394ebe431385a677c1a3e27c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ