DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
127fda6568be8dba054f067268aa751d_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
127fda6568be8dba054f067268aa751d_JaffaCakes118
Size
34KB
MD5
127fda6568be8dba054f067268aa751d
SHA1
6f23caf65bdf23ec214c36e5202e16ac1abf9f34
SHA256
9e0c10c63577c34d085ee486820dc8305d08271a57012a8b0b87d68f91e42caf
SHA512
33e8f1ad6e89c17415598706f5c2eeb1b600e3b3c5bf75864d91f13766511fff83cb851648cc28f8f47c950e1fee8bd7024d96ce631931426faab2b2bcf3ff4d
SSDEEP
768:jiOOFzUUe2BjgNAZzIDT5MGW5X7W6Ee8yryBV4Q7DI:jiAUeI8gocXi6Es+v4/
Checks for missing Authenticode signature.
resource |
---|
127fda6568be8dba054f067268aa751d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RegCloseKey
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE