DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
db2a26f6b9be264be5834764341660d0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db2a26f6b9be264be5834764341660d0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db2a26f6b9be264be5834764341660d0_JaffaCakes118
Size
56KB
MD5
db2a26f6b9be264be5834764341660d0
SHA1
66f79380d89b142c6140c17e03d4e318da5c6588
SHA256
c56e554b18a841cafbb8bbdf441080052dd7f125350a7e45678dabb0ee9447f5
SHA512
c06bc76a964a2ba87f0b9ec8f1c58c61bf3d5bd35e7ef3c108b76a79f622744af65a67d4e55a2d70e8f18838b18da2ed1f5946cc6b217da4fcf0536ccb18049e
SSDEEP
1536:uurO+t7zUXu6f99QPeeu4TGa2e0DAwI5p8Eui:uMFzmNVi2sTGKui
Checks for missing Authenticode signature.
resource |
---|
db2a26f6b9be264be5834764341660d0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
RtlUnwind
RegCloseKey
CharNextA
CoTaskMemFree
SysAllocString
SHDeleteKeyW
SHGetFileInfoA
WSAGetLastError
GetIpAddrTable
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE