DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FreeDumpStreams
GetDumpStreams
Static task
static1
Behavioral task
behavioral1
Sample
735ff889145c5069e63b40509b3b0bdd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
735ff889145c5069e63b40509b3b0bdd_JaffaCakes118
Size
129KB
MD5
735ff889145c5069e63b40509b3b0bdd
SHA1
3a66b8fd6b26d0cc55d0aee94a3f3473754a1be8
SHA256
4b2ebf9a2853ba32c5a2406ed17304c138be66656a41aee0bf157a37ede39b8c
SHA512
b328eeec5ac46769c153af30665e2649f17af25584a14613e6902779723c4caa6521d905f6f836d2dd07580f7f6b730d4c4484a2e11c35e74e43d14b94ade67d
SSDEEP
3072:5tfdy7q/s0T7zs8uNxO2r/aZ+fuzQCpERIa7T:Y7c3zsxZi8gTEl
Checks for missing Authenticode signature.
resource |
---|
735ff889145c5069e63b40509b3b0bdd_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
SysFreeString
CoTaskMemFree
RegCloseKey
CharNextW
ord12
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FreeDumpStreams
GetDumpStreams
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE