DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Static task
static1
Behavioral task
behavioral1
Sample
4199ff383bef552a815e1f0e17132f45_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4199ff383bef552a815e1f0e17132f45_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4199ff383bef552a815e1f0e17132f45_JaffaCakes118
Size
260KB
MD5
4199ff383bef552a815e1f0e17132f45
SHA1
e01b60a13aff6c5da268a0fab24fae0009085c88
SHA256
c6e2438972c64a8cdce1d4f5e77ec33c50b2ba680b7f833c39f5e3a3077870cd
SHA512
1aaeb8c70e7ef9d6726811fee063dc7d4197647586674f57079e9aee4649239ae5f0fb7926747236289fb0efca53e41cad73974a0be54fc08414a977bbaba084
SSDEEP
1536:GuoLidM9M+ER5aeMK6LWEf3BQTGKkowxAs0RWyk05QlVDajX5w6LaeV/TRQ8G:YLXrEPBMK6qoxi5QzE9e
Checks for missing Authenticode signature.
resource |
---|
4199ff383bef552a815e1f0e17132f45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrClientCall2
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ