DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
25799e952c51f185fd475fe7fcbfaad6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25799e952c51f185fd475fe7fcbfaad6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
25799e952c51f185fd475fe7fcbfaad6_JaffaCakes118
Size
100KB
MD5
25799e952c51f185fd475fe7fcbfaad6
SHA1
aa5a57b92d1e1e4cec4b2937d45326e06c2295f5
SHA256
298819f52e60fd47e4b3df1bfcf2eddcf6e997e5d94c3b568ed5f989c3d7c52d
SHA512
55fb58d0b76bb3453a95e1dfc602311718b0626ae84cff818e27ae99238c159fdd5dec161904363723ba235d88d5d0f649a2a8551b11dffb3c9b4b527d3d29b8
SSDEEP
768:A0NG0i3hXDnrqlMMZUnFPL+Wcaqel0FS9pxFS9B8qyxEyjNk9k3ymR+5:FMZhXnmDKFPJOel0epxeB8Zx7k9IymR
Checks for missing Authenticode signature.
resource |
---|
25799e952c51f185fd475fe7fcbfaad6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord518
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord592
ord595
ord520
ord523
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord319
ProcCallEngine
ord537
ord644
ord645
ord648
ord571
EVENT_SINK2_AddRef
ord101
ord102
ord103
ord104
ord105
ord320
ord612
ord321
ord616
ord617
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ