DllCanUnloadNow
DllGetClassObject
DllIsQTInstalled
DllQTClose
DllQTInit
DllRegisterServer
DllUnregisterServer
QTRegisterExtensions
QTShowProps
QTUnregisterExtensions
RunDLL_QTRegisterExtensions
RunDLL_QTUnregisterExtensions
Static task
static1
Behavioral task
behavioral1
Sample
d5e5875f93eeda4a3c522d442fff148d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
d5e5875f93eeda4a3c522d442fff148d_JaffaCakes118
Size
1.9MB
MD5
d5e5875f93eeda4a3c522d442fff148d
SHA1
f33a1f1066c455f1655402a6b16ce67d4babc28f
SHA256
b3cbe503d318864f56d2af78e2220b9d40bcdd962f1c1f1b79282e47753ec57b
SHA512
8a2215b30e4c03bb09da25a9eb656e0922cd7f4cf8b7c12aab339952c7fa044c32a4be9254097b9685f17a295750937f37dd8506a59b421ff0c9ce7931a8d1a4
SSDEEP
49152:xRQOQR1j3vbwgXmDbsL4pu2hAm9BoJaX0N6xT+aL:xRQOu1rzfaFJOxsEN6N7
Checks for missing Authenticode signature.
resource |
---|
d5e5875f93eeda4a3c522d442fff148d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
DllCanUnloadNow
DllGetClassObject
DllIsQTInstalled
DllQTClose
DllQTInit
DllRegisterServer
DllUnregisterServer
QTRegisterExtensions
QTShowProps
QTUnregisterExtensions
RunDLL_QTRegisterExtensions
RunDLL_QTUnregisterExtensions
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE