DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e2a5905868648dd7c9ef35f9ca3e4c5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e2a5905868648dd7c9ef35f9ca3e4c5_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0e2a5905868648dd7c9ef35f9ca3e4c5_JaffaCakes118
Size
46KB
MD5
0e2a5905868648dd7c9ef35f9ca3e4c5
SHA1
807210eb6d75a05ba960f5a9446d9e48122c7ccf
SHA256
0e1cbba537fa8c1a3ccf02953a774bff747b730f655e79184f6488b7339336fd
SHA512
118e585ebd4bb1bd48b6f2e6c28903239016d1fbcd19000a0674e907f077f402e3159ca3a17d0b23d829cb13bb80d0ce45a76d43261fc7021522843bab467789
SSDEEP
768:jfIz0fvlaVFf9KrZxvOCpHxq3VMLaGl8i3cyb8C+RSODTlMIplQAtZ7DwN:20fvELlebvdQ3VMLa48i3c4Km4TyN
Checks for missing Authenticode signature.
resource |
---|
0e2a5905868648dd7c9ef35f9ca3e4c5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NtClose
CharNextW
RegCloseKey
CoTaskMemFree
SysFreeString
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE