DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
566b07ec1eb98d5ff25b5f5447cd7526_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
566b07ec1eb98d5ff25b5f5447cd7526_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
566b07ec1eb98d5ff25b5f5447cd7526_JaffaCakes118
Size
176KB
MD5
566b07ec1eb98d5ff25b5f5447cd7526
SHA1
403efe8b119185f18ae4e61a269f700ab57dcc4a
SHA256
d39ff4a7f2d8732336ae10a75cc44a1891ea8d6a74500c341fcb61d87c9e092d
SHA512
93fe58e97a90f216747d64e50042e0ad92e695321f9ec66328ee32c73e2f78b44dc77ffa43903304d2f063609913bd08ef80d7f1ea9c24d79eafcca39abd8bdb
SSDEEP
3072:/BXLVMhsx5FwYO5PgAp2DMelYBFeM4FcCG7TCnp5cvLi22yT:/BXLUI5O5PgFMwAcM4RG7TTvL32yT
Checks for missing Authenticode signature.
resource |
---|
566b07ec1eb98d5ff25b5f5447cd7526_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
SetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ