DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dd738570d4f9b5086bd241b1bcb4370e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd738570d4f9b5086bd241b1bcb4370e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd738570d4f9b5086bd241b1bcb4370e_JaffaCakes118
Size
32KB
MD5
dd738570d4f9b5086bd241b1bcb4370e
SHA1
624d52befafd2532bad45195d2d01781a5f74842
SHA256
e75f24e91a906b84cd5d5cbdeab1fa33843869f22f25f216bbf1348b44855062
SHA512
9a7be806271ed6a40e86c7067845517c1af424ed285742b91ef8a50d118b338d5e40a0f655e980f31d612f04260e883d87c8a29017689e493e72e359c19bca67
SSDEEP
192:Ub31rznHUjz3SmGzcJp7VSCxUOJiZ6lUFDROUxXfBbVZ87h7JwaBjcNK8qjykm5G:UrtzaMm/l8dQ7EaBjyKFekmcwbU
Checks for missing Authenticode signature.
resource |
---|
dd738570d4f9b5086bd241b1bcb4370e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NdrProxySendReceive
NdrOleAllocate
NdrProxyErrorHandler
NdrProxyFreeBuffer
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrConformantStringMarshall
NdrProxyGetBuffer
NdrConformantStringBufferSize
RpcRaiseException
NdrConvert
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrStubInitialize
NdrClearOutParameters
IUnknown_AddRef_Proxy
NdrPointerFree
NdrPointerMarshall
NdrPointerBufferSize
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_CountRefs
NdrPointerUnmarshall
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
NdrProxyInitialize
NdrStubGetBuffer
NdrConformantStringUnmarshall
wsprintfA
GetModuleFileNameA
lstrlenA
lstrcatA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueA
RegCloseKey
_except_handler3
memcmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ