AuthorMsg
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HhWindowThread
HtmlHelpA
HtmlHelpW
LoadHHA
doWinMain
Static task
static1
Behavioral task
behavioral1
Sample
386da3e18b719625cdfcf4143a927270_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
386da3e18b719625cdfcf4143a927270_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
386da3e18b719625cdfcf4143a927270_JaffaCakes118
Size
214KB
MD5
386da3e18b719625cdfcf4143a927270
SHA1
c5cc5706157fb5f348779a12ecacf46c4067f1b5
SHA256
52486ef6d8bd6f9dc7d9e4cdab458a0a18fe2bb08e8036a94992108bfaafd09f
SHA512
9c21adba4a2bfc3ea45dbc7c334a28a58482eac53538fd86da9d4a27754849675e1cc3bb18b247c6a8443dd73034fdddd7842d1d0baf1b9b7cbb17df18d4e45b
SSDEEP
3072:/D9pERBDSFtKYFPmOIE1ZHaxzNxDgyT9MGMsLkgaWvg0inUH36sVZgT9XQH7/M7a:/LELmFZFeTuYfayFMsJLBUTtQbX/
Checks for missing Authenticode signature.
resource |
---|
386da3e18b719625cdfcf4143a927270_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
WinSqmEventWrite
GetDC
SaveDC
AccessCheck
ShellExecuteA
ord17
OleCreate
SysAllocString
StrStrA
AuthorMsg
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HhWindowThread
HtmlHelpA
HtmlHelpW
LoadHHA
doWinMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE