DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
895672f0dcc57e414732f42baa8c906d_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
895672f0dcc57e414732f42baa8c906d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
895672f0dcc57e414732f42baa8c906d_JaffaCakes118
Size
13KB
MD5
895672f0dcc57e414732f42baa8c906d
SHA1
862f7bad73c62d9447b65219ab6d2a68dae16193
SHA256
0462498543ceef54fdc7a6a8158d9b0a06f5d46d11ad7fcc762e15d39c2e161b
SHA512
acecc8cfe454c0fb403145d6924d65c512cc5941854a54ddbc7b9297d1c5f3d086ccdc3e8b72e18e1b480e6f73369feb127d3f21d1f8786bf2db4d5e18a986e8
SSDEEP
384:/+HOfFIajSgnuTv2vLoG7zmP6I7bZn3UYpxWCxV2W:mHO9IPgNzmCIPZnEo
Checks for missing Authenticode signature.
resource |
---|
895672f0dcc57e414732f42baa8c906d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NtClose
StopTraceW
CLSIDFromString
SafeArrayCreateVector
??0CHString@@QAE@XZ
PdhPlaGetInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE