DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad21bb5f60ed1339a1172b3abd7be9d9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ad21bb5f60ed1339a1172b3abd7be9d9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ad21bb5f60ed1339a1172b3abd7be9d9_JaffaCakes118
Size
68KB
MD5
ad21bb5f60ed1339a1172b3abd7be9d9
SHA1
e99218adbcc71b49bc8e5e9907e2ec902051e0e7
SHA256
d61a650e9cb1c154d99812d15ef90cd826422d1f63a5246db68b4186d5aa9c0c
SHA512
6b99ed8be56d144af309c9c0b68610a3955be045bf1a33f163b816cd07dcb49b71edb8c0da50ae088da8e58de0b88c82b60bf979709045092ee0874871fc9baf
SSDEEP
768:/WbXRk+92Yn1u0w7QwUWt0JUmJ2pvCujPpymNJ+i3Bf1nGX1rUwfsbZmXQj2Yvbl:/9s80gNt0JUmJVujvRNuFE3j1
Checks for missing Authenticode signature.
resource |
---|
ad21bb5f60ed1339a1172b3abd7be9d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
RegCloseKey
CoTaskMemFree
RegisterTypeLi
CharNextA
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE