CALLSUB
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f89ca60bc780603a10dc7245dc848395_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f89ca60bc780603a10dc7245dc848395_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f89ca60bc780603a10dc7245dc848395_JaffaCakes118
Size
252KB
MD5
f89ca60bc780603a10dc7245dc848395
SHA1
bb6a5a94dbebbec92d40faa3b031d9d7086139d7
SHA256
b6fadcd26f30d95a61e36525a8fd3c4097c1722439af520167e05003bb8b3b14
SHA512
7b570fc059385f7ab686b0503d828ddcad01a2b380046623304abdb3762902a5d3c20bfca8faa4b5a488cb7a23e37175fd541bb30eababb6901107b09422767a
SSDEEP
6144:ibJMrNmb9W2FGWLn/zOs5mnkKvp/8sEXk2FJJu:ibJKwb9LFGWnOs5mnkQIDFL
Checks for missing Authenticode signature.
resource |
---|
f89ca60bc780603a10dc7245dc848395_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetSysColorBrush
SetMapMode
DocumentPropertiesA
RegCreateKeyExA
ord17
CALLSUB
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ