DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
b5629fab487568129409b0c262554bd2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5629fab487568129409b0c262554bd2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b5629fab487568129409b0c262554bd2_JaffaCakes118
Size
35KB
MD5
b5629fab487568129409b0c262554bd2
SHA1
9bd85faae45bf5f2a5de9488983e58fe2e29a11d
SHA256
84828abfc14530a7357a8dbd29cc5f21db2dac18757ad53731121fe60f07dc42
SHA512
03086c6e7f0ecaefb12495a95b3eb13e3fcdb378708858fe53d77322813a199799ba46ef74a346e846404f06815495a98c8b71a55ee6aa48d24b743780a6389a
SSDEEP
768:aUfpoXXqYCyjdNt4w+Vf4Izpj0hMHg1q7DhC91:aUf2a3q49pmFH91
Checks for missing Authenticode signature.
resource |
---|
b5629fab487568129409b0c262554bd2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CoTaskMemFree
SafeArrayRedim
CharNextW
RegCloseKey
InternetGetSecurityInfoByURLW
ord158
CertSerializeCertificateStoreElement
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE