DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7d7eb3237c8b1d899cc2f332f0dd0267_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d7eb3237c8b1d899cc2f332f0dd0267_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
7d7eb3237c8b1d899cc2f332f0dd0267_JaffaCakes118
Size
42KB
MD5
7d7eb3237c8b1d899cc2f332f0dd0267
SHA1
78b8f26dd304bafcec940318269933a0f8befd17
SHA256
d8567681d40aee736a42a28f451fa7d979b2f0c48064656ff545f3fd487bd0c4
SHA512
5f664adc25ddd2d1aa74fd4947108209758e1e53023eb08a0804e77bfed5da2c170ffce2aa4b0fc9c3b57ff6d8d93c346ffe7c4dfa6ffce9923d24fb93ea7607
SSDEEP
768:kNORz8rhCI/o8ZaXs9AkIL2POGYSLRjZKK2FWfFcr7DpXl:kNORorhIVX6AkqE7jZr2ENGXl
Checks for missing Authenticode signature.
resource |
---|
7d7eb3237c8b1d899cc2f332f0dd0267_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
strrchr
GetDC
ord17
FreeSid
BitBlt
CoInitialize
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE