DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
01cec17a9089317c35806da01215cfa3_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01cec17a9089317c35806da01215cfa3_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
01cec17a9089317c35806da01215cfa3_JaffaCakes118
Size
44KB
MD5
01cec17a9089317c35806da01215cfa3
SHA1
99c5adc546af8bfe7c96e974724db8b50b2856c0
SHA256
2af0297a54c1750c056f573f2689befcbcfcb2be1a871052684a21dc8d55167f
SHA512
75f06063ebebc8e9423b3dd3a6a13a449aa9e5e43c5f570d7e5c6be5121f59b23c6800bb2158c9ff159c86d0957dc8e000e921fb72b830992ef555b30f0f3cbb
SSDEEP
768:DmvDUTsH1abvfRw2YmuYnGE0oDqj+ZrpGSGXnTwZ7DNIu:DmvDUTsHcrJwu5nHr/cnTwDIu
Checks for missing Authenticode signature.
resource |
---|
01cec17a9089317c35806da01215cfa3_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NtClose
CharNextW
RegCloseKey
CoTaskMemFree
LoadTypeLi
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE