DllCanUnloadNow
DllGetClassObject
DllMain
HideIcons
Reinstall
ShowIcons
Static task
static1
Behavioral task
behavioral1
Sample
998ad229d0ba63256d7c534c9327b043_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
998ad229d0ba63256d7c534c9327b043_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
998ad229d0ba63256d7c534c9327b043_JaffaCakes118
Size
33KB
MD5
998ad229d0ba63256d7c534c9327b043
SHA1
07208f25e9a302283465bada857204393bcffc0c
SHA256
8c06d305fdfbb7b52d3544cf97cf685b7575913c91389efc77a46f7a4cd01b44
SHA512
e7600a74932d320d19bb8722c448cdf7836eaf59258093fc63ceaf4486859466906deccbd920cdc4f3749683d148740451b7010106436e518ec6c54a346c7afb
SSDEEP
768:ssY8Fw7TrWP1zpBg/fRwAjJbBQNpF6khRkmw7De:sr8Fw7TSP1GfxjJcpFT
Checks for missing Authenticode signature.
resource |
---|
998ad229d0ba63256d7c534c9327b043_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
LoadStringW
CoInitialize
VARIANT_UserFree
NdrOleFree
SHGetFolderPathW
StrStrIW
memset
RegFlushKey
DllCanUnloadNow
DllGetClassObject
DllMain
HideIcons
Reinstall
ShowIcons
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE