DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
86f4a281b80492d9bf26a1c20b641d23_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86f4a281b80492d9bf26a1c20b641d23_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
86f4a281b80492d9bf26a1c20b641d23_JaffaCakes118
Size
160KB
MD5
86f4a281b80492d9bf26a1c20b641d23
SHA1
f200806af6b805f3b1ee0274ad9ec9cecd1ddc16
SHA256
aa8f9b3e637c5ddb4115f43106d7d46ec34dd95e8d37b4944aed90362f4835e7
SHA512
238042bfd76054c01857dc4b61382d730d911109baea94c1a005514f20f02d31fa28571f43fe214c9845b9a77faecf81c7c07ecb7175e9c603516afe584920b4
SSDEEP
3072:7vZeohkNWWtpldqVRl6YbcuP8k8xP8kFPnEctcEnPFk80xdLqGH9+GRably6X3TE:jsyBWZMhlbcuP8k8xP8kFPnEctcEnPFc
Checks for missing Authenticode signature.
resource |
---|
86f4a281b80492d9bf26a1c20b641d23_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
ord660
ord558
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord592
ord300
ord301
ord596
ord597
ord598
ord599
ord306
ord520
ord307
ord522
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord531
ord716
ord532
ord717
ord319
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord648
ord573
EVENT_SINK2_AddRef
ord681
ord576
ord577
ord578
ord685
ord101
ord102
ord103
ord689
ord104
ord610
ord105
ord320
ord612
ord321
ord613
ord616
ord617
ord618
ord619
ord650
ord546
ord580
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ