DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Static task
static1
Behavioral task
behavioral1
Sample
8834bb442e1639f8a762a42158dad612_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8834bb442e1639f8a762a42158dad612_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
8834bb442e1639f8a762a42158dad612_JaffaCakes118
Size
19KB
MD5
8834bb442e1639f8a762a42158dad612
SHA1
bbea2f24c0ba4e4089cdf0196d6b39264ae2e504
SHA256
72375857c010be51509f5e570fdac856f340b1da7e8cf9aeea64e7cd0d49bd22
SHA512
b7f0678f56fdb4498e7a8f4425416b650af2f99ffd88f56dce2cc028603fad2633a8e1bc0fa75e21b2e5dd8b494fb733c546cb3dd7d4d539ffeac4ffe279bedc
SSDEEP
384:Aa/eH62wEmLig6ROtVBLkuTykIZeobtNTvGPAtdJ4mgPuo7vvxlLsW0q:d3DhCObFkayjDpFa4JEB7DZ
Checks for missing Authenticode signature.
resource |
---|
8834bb442e1639f8a762a42158dad612_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
BSTR_UserFree
NdrOleFree
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE