DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3587356f801d28014a50533ecfc798e0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3587356f801d28014a50533ecfc798e0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
3587356f801d28014a50533ecfc798e0_JaffaCakes118
Size
211KB
MD5
3587356f801d28014a50533ecfc798e0
SHA1
dec78e07f7e65cab86bb9dc36adbe46c4836e0f5
SHA256
baa2dd3750c737a3cc53748301ea2cb4b03296cc576bbad2c3563e95a2b12d9e
SHA512
5b12557d02fcde4afb267939feee912b34f5944fb9639560bbb833931c54da00941dc320a45d03a3a8d3dbfced8b1160b0437e71e6e6635d398c028e7e1f8adf
SSDEEP
6144:NUEzIEZRclMth/nNW9uADryGs0pPpkfE6nODeo3:NRIEZmgHW9zpJ6geo3
Checks for missing Authenticode signature.
resource |
---|
3587356f801d28014a50533ecfc798e0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
atol
BitBlt
GetDC
RegCloseKey
CoInitialize
VarI4FromStr
VerQueryValueW
CryptProtectData
GetModuleInformation
timeGetTime
RtlNtStatusToDosError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE