CLSID_CfgComp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IID_ICfgComp
IID_ISettingsComp
IID_ISettingsComp2
Static task
static1
Behavioral task
behavioral1
Sample
b2460ad4a932d8e115d4a4e8a36eb9f0_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b2460ad4a932d8e115d4a4e8a36eb9f0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b2460ad4a932d8e115d4a4e8a36eb9f0_JaffaCakes118
Size
23KB
MD5
b2460ad4a932d8e115d4a4e8a36eb9f0
SHA1
e185486dfda65ad3dff5c717ef08528196f27213
SHA256
d23a3dbe93ce48bbbb762a04d614a7266654737be53c8e8c59039f444ea32318
SHA512
5e81bd34c8a76da84e245cccd659fd4206f4432642f7086ed1b8df621f63070f3271fecb10fb7dbd81b648b037d6c735d60365c07cffd9c659327cd624ecacc4
SSDEEP
384:00ZkaWtAI6KOwKg7iqp8QiKbYnm8lnws0cXyZpCBITkPprAxUB7vvxlLA40WWCJU:00Zc6zwKg7L82b4fmc6PoBrAy7DdJ
Checks for missing Authenticode signature.
resource |
---|
b2460ad4a932d8e115d4a4e8a36eb9f0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
ord15
RegPdQueryW
WinStationEnumerateW
LoadStringW
SysFreeString
CoTaskMemFree
FreeSid
SHDeleteKeyW
SetupAsyncCdConfig
CLSID_CfgComp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IID_ICfgComp
IID_ISettingsComp
IID_ISettingsComp2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE