DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
110d88121385d0288e0fe9f3e6a077f6_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
110d88121385d0288e0fe9f3e6a077f6_JaffaCakes118
Size
53KB
MD5
110d88121385d0288e0fe9f3e6a077f6
SHA1
173df2991b84118b1440e40a653f52929e76d901
SHA256
a7b8fb3e1883c9133734ec1475eab395831846f6a0a1db3edfd26d80652d5fe7
SHA512
730719faa6e820cddd55d2d9018fa9e2ccbd3ce93248e371fc0c96adb530a35a938aa78c18d3bfe237ffbbf3886d59f90064565399dc2d140ba2b66b307f6f4b
SSDEEP
768:IBTcux3k/0p9antYKBg27ynKT7L6nMGcrwWO8lep0MbsgBH9yJdsJVHPhJJvD7DH:0YEU8pg2l27PT7EFWO8C0x6HvHZTz
Checks for missing Authenticode signature.
resource |
---|
110d88121385d0288e0fe9f3e6a077f6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RegCloseKey
CoCreateGuid
SysFreeString
LoadCursorW
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE