DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
19b4b84940468f6c48efd8c2e13906b1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19b4b84940468f6c48efd8c2e13906b1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19b4b84940468f6c48efd8c2e13906b1_JaffaCakes118
Size
24KB
MD5
19b4b84940468f6c48efd8c2e13906b1
SHA1
f578126db6bfb8d5e8a415191d9726bcb24d10b6
SHA256
eaca80cc300656a926ac85de3fdf0a20ff66125a4bbf850b9470dd6b2cadedbd
SHA512
8b9a2aaece6f73bf8541b9ef449c557be79434393d1567f26bc08e15419e158b38ef4f47cb19e1a4c62ce044206ddd4f7167bd1cce1b97c0e5c9c81d8456e2f8
SSDEEP
192:uJ+ZhxGldRpXKRhynoIxL0sdjWGs4DFCAE/YF0S3H:o+ZHARp6RhyNpWGDFh
Checks for missing Authenticode signature.
resource |
---|
19b4b84940468f6c48efd8c2e13906b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
MultiByteToWideChar
lstrlenA
lstrcatA
WideCharToMultiByte
DisableThreadLibraryCalls
GetModuleFileNameA
HeapReAlloc
HeapFree
CharNextA
CoCreateInstance
LoadTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
lineRemoveProvider
lineAddProviderA
lineGetProviderListA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ