DllCanUnloadNow
DllEnumClassObjects
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
36d72469f421ba282424628b1429b5d8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
36d72469f421ba282424628b1429b5d8_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
36d72469f421ba282424628b1429b5d8_JaffaCakes118
Size
37KB
MD5
36d72469f421ba282424628b1429b5d8
SHA1
9beb5c3ee79a386981de9bd68a87fdef1b4dd60d
SHA256
6266aa1c9338010e2d8bb588d0ad4740a958c4867ca26eec9294b74fd78cc66c
SHA512
053b6370c5c924608b74a4a0230956f3622896c909bac544df6c65e495c2796d65d446ab213333dc6220e5d1765bea15a85c1d30de78ae266494b53497f9e5b3
SSDEEP
768:8TbrFkBo+lgH9HQIuwKz5FGFO8gIeBU/J2nRb7DIvC:8THSCHZ/8FGwU/J2R8vC
Checks for missing Authenticode signature.
resource |
---|
36d72469f421ba282424628b1429b5d8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
SaveDC
GetDC
ChooseColorW
CoTaskMemFree
ord9
ord29
RegCloseKey
DllCanUnloadNow
DllEnumClassObjects
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE