DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
53f36bdc2a4ab67d2272d482f34a4a74_JaffaCakes118.dll
Resource
win7-20240708-en
Target
53f36bdc2a4ab67d2272d482f34a4a74_JaffaCakes118
Size
43KB
MD5
53f36bdc2a4ab67d2272d482f34a4a74
SHA1
f6c74d8fe3dc3fee6b8557af00eb621b356b3496
SHA256
56d35a54c85b22602fcb8105d9521cde77c27fb60232eb6ebeeb2a033449e9ac
SHA512
29d5da4ae58ccbc583f7762d8df014e90553d3d26ff6cd81caec8019c402f48ea78a3aaf8eec910b7872f0e52c8bbe0c5e1fd1546539c13584cd65f71a0d8d01
SSDEEP
768:OGRGBtCRhdrH33Owimw/BejagFjF8z78GSheXq7TGVb/TmLz/ABr0Nf:/Ia7rH33O+WojbFjS4GShRe/k/ABr0N
Checks for missing Authenticode signature.
resource |
---|
53f36bdc2a4ab67d2272d482f34a4a74_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
FreeSid
SysFreeString
CharNextA
DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE