DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a3479655e999cf06bdace8da636c9ad3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3479655e999cf06bdace8da636c9ad3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a3479655e999cf06bdace8da636c9ad3_JaffaCakes118
Size
24KB
MD5
a3479655e999cf06bdace8da636c9ad3
SHA1
b4f94e076822d5f83609ca04fc2d6df9e65d668c
SHA256
de889eba4d72e1c801076b7c9182c4e2fe7481b2975a6c7ff413937f6037b47d
SHA512
24518d6145b41fd5ff182e048885382a93cb2f16903b4105b0ffa3d2e67e86215ce9e57f47a04433919422795a2c67c3db56a591ecf4c0ccfe220ad5c90bbe80
SSDEEP
192:STdk6AN6f4kIzsGXA8vwZBATQ8jQZ+A8ssim9ZAt6SqXT/E4zhka:H6ANd9M8v0BpF8ssiYu4zhka
Checks for missing Authenticode signature.
resource |
---|
a3479655e999cf06bdace8da636c9ad3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
_adj_fprem1
ord518
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
EVENT_SINK2_Release
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
Zombie_GetTypeInfoCount
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaInStrVar
ord319
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
EVENT_SINK2_AddRef
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
ord103
ord104
ord105
ord320
__vbaVarDup
ord321
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ