DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ITUseDefaultObjectLookupOrder
WMCreateStreamForURL
Static task
static1
Behavioral task
behavioral1
Sample
a44d22345652368801ae1e4b3c17d6ec_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a44d22345652368801ae1e4b3c17d6ec_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
a44d22345652368801ae1e4b3c17d6ec_JaffaCakes118
Size
86KB
MD5
a44d22345652368801ae1e4b3c17d6ec
SHA1
5c06f9ce155a99f85b9b552d9b28b48c9d302328
SHA256
ce23b429fe8c76f2fa7daf1caec80bc784846a0df97310bd990d0481518e99c1
SHA512
aa752bcf1215f27586b39ef3cc6b6214c84dde87f6cd1894dc636d6ae73f9cf5aa42dc6a47a4f7c5d301bf517093370e8db841480070e289fcf62ae00bdd0ab6
SSDEEP
1536:bE63FW2zDYGuzUnGG/P+C+/X/vsE6IltILK7lTrn23q/pNlVIp0S3:bEuHzDpuAGMfe/0EZILGlP2a/vlVE
Checks for missing Authenticode signature.
resource |
---|
a44d22345652368801ae1e4b3c17d6ec_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CharNextW
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ITUseDefaultObjectLookupOrder
WMCreateStreamForURL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE