DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8e5838f1da6ca4a080c0918927cc7361_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8e5838f1da6ca4a080c0918927cc7361_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
8e5838f1da6ca4a080c0918927cc7361_JaffaCakes118
Size
65KB
MD5
8e5838f1da6ca4a080c0918927cc7361
SHA1
c08d6fcc70ca6f1958d8e5f03b4820aeae355d54
SHA256
fe5b757f3904f8a51e05eefc817a3e841e62a265e8f8c3802fae420c16f1b81a
SHA512
1e4560d2de0e48f2f41ccb1e0d3903c2fb639c9ac21fbe5feca20dfdfab32bf4e5d4c71f7874f56078c7cc2296709eaeaf9432599014a0e7501bb0f0f12154f3
SSDEEP
1536:yBtTMqOKOY79+8tlWTrmSIC5OdekNSYqo5glzW:lqNx5gAC7AiW
Checks for missing Authenticode signature.
resource |
---|
8e5838f1da6ca4a080c0918927cc7361_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
GetDC
GetObjectA
RegOpenKeyA
CoCreateInstance
TF_CreateLangBarMgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE