DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7288f61157002a3bfada7e64dcaa6ba6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7288f61157002a3bfada7e64dcaa6ba6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7288f61157002a3bfada7e64dcaa6ba6_JaffaCakes118
Size
19KB
MD5
7288f61157002a3bfada7e64dcaa6ba6
SHA1
3a224c1fc5d0bf627f0d4a697d12d72bfcbb1538
SHA256
63b3043257752c02f9f4f181465d6db6b8e9adade32d64e5cffbd6eb828b3a7c
SHA512
1bfaedde74985e02c820fe1f474af60cbf2e9959cc2df971b7bf7dc7bade89d7ccf2f903875883dbf62997e011b3c7a8b436049d8a1e7108d347ca7ce117fe92
SSDEEP
384:WT/IZpVADCzGUtyKclV2zf3YZi+fUMA77lzImBY7WwsW58JWAECrD5i:WDgPAG3cl3s+fszp+8JWAECc
Checks for missing Authenticode signature.
resource |
---|
7288f61157002a3bfada7e64dcaa6ba6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE