CreateInstance
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
06d401c67e0805113252f25ecf0a1199_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06d401c67e0805113252f25ecf0a1199_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
06d401c67e0805113252f25ecf0a1199_JaffaCakes118
Size
105KB
MD5
06d401c67e0805113252f25ecf0a1199
SHA1
3a116c57f77d34affe0f232c6ef27649f2087b85
SHA256
58294d2fa255ecceb9e3b26462bd7b9516ea3cbc29ade44be5599464cdb7a2c4
SHA512
e8c8c3f8f6f2409877bd6af0a78599ae5bd1637e796bfe19e47f87e69f526d191515036b3ceebc12ee804d2339ae0abd4e0336fea7353b6ba0b69b65dea8f280
SSDEEP
3072:EYQsb6UqDKSoNUip68Uqyd0oDhVtQJKyB0H22lq0npmQ:EYQsb6pGRWCoDRQJpB0W2Fm
Checks for missing Authenticode signature.
resource |
---|
06d401c67e0805113252f25ecf0a1199_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
GetDC
GetSystemPaletteEntries
CoTaskMemFree
RegOpenKeyA
SHDeleteKeyA
DMORegister
CreateInstance
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE