DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28ac65f3d931fa9ca8a66ad322071c62_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28ac65f3d931fa9ca8a66ad322071c62_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
28ac65f3d931fa9ca8a66ad322071c62_JaffaCakes118
Size
34KB
MD5
28ac65f3d931fa9ca8a66ad322071c62
SHA1
d71b99c6d599fe9e7b6b85b70ca176ddc2e0a272
SHA256
f622f3eaa5c24905f2e6d56b5a2fd375174c5407ef2d56d935f2a9e502e081ca
SHA512
79b6040094dd56de921451ce2e419da9dddad79ab0edfd919d4a84da35c3a57c153a1901bc707c444dd7b44daa048e55f98a5142bca67a793fbf345cabc7dd51
SSDEEP
768:KD98viDZD/psaU4D4BALtNu3R5VGD9m/WTVuE7Du:grBRBCAHu3vVym/Wk
Checks for missing Authenticode signature.
resource |
---|
28ac65f3d931fa9ca8a66ad322071c62_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RegCloseKey
CoInitialize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE