DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ITUseDefaultObjectLookupOrder
WMCreateStreamForURL
Static task
static1
Behavioral task
behavioral1
Sample
5db6cf7c3d68d5275e0a9f341d5bf5e6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5db6cf7c3d68d5275e0a9f341d5bf5e6_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
5db6cf7c3d68d5275e0a9f341d5bf5e6_JaffaCakes118
Size
89KB
MD5
5db6cf7c3d68d5275e0a9f341d5bf5e6
SHA1
b2b81bc5b8ca93cb05f2fd67e6f545fd6190678a
SHA256
82635e916f5e8b4620eb7f2d2a57f7dbe942d8b848191182d76e4f357fe418c6
SHA512
6739e4ad860993a6d27f46401666ab489d80ab26e0b189a6d8e3a66dad5ee960965a6f4e046af8d6a497f914777825249b09a3089dda3a96ace06cb33184c684
SSDEEP
1536:S4lN99G71Xs45qTw4GrHDsZy/+V5DuPedeXKuNXjQFxwF:T27J5AZiDn/kQG89Xj8xwF
Checks for missing Authenticode signature.
resource |
---|
5db6cf7c3d68d5275e0a9f341d5bf5e6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CharNextW
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ITUseDefaultObjectLookupOrder
WMCreateStreamForURL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE