CPlApplet
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28f3a9d95a04525879a6f8dbaa868180_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28f3a9d95a04525879a6f8dbaa868180_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
28f3a9d95a04525879a6f8dbaa868180_JaffaCakes118
Size
61KB
MD5
28f3a9d95a04525879a6f8dbaa868180
SHA1
cc63a3f63088f4ab2589deefd385e7a9c3f8ff37
SHA256
4f14d12319bd50f6ecb84882d83e8fd605f4b781d54b39d3ae5c59fcbf3fd39f
SHA512
872f475b9cab8e7e79432ffa8e3b064b8d6870ad5e1dc6c77101147ccc8d89c8c5367a212766a6a4b91e1b788a9fb92590423817b545b2890a4b620317b3cb09
SSDEEP
1536:MiFJFHN5mrsIizAPM0KjbEeV/rvRk16NlTekE:MiF3HszHYPDvRLfY
Checks for missing Authenticode signature.
resource |
---|
28f3a9d95a04525879a6f8dbaa868180_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
LoadTypeLibEx
__vbaVarSub
CPlApplet
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE