DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Static task
static1
Behavioral task
behavioral1
Sample
f07b4c32eeed7a58e152ebfe5a42959c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f07b4c32eeed7a58e152ebfe5a42959c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f07b4c32eeed7a58e152ebfe5a42959c_JaffaCakes118
Size
23KB
MD5
f07b4c32eeed7a58e152ebfe5a42959c
SHA1
6f606f84cde91fc3f5ff0c6bc9655e717aec0554
SHA256
0f5c4b7f296bd17016556b39c989caf3ac16aa9c12882f6d77893506e8090e98
SHA512
2b03b743161385b3dfd9b68cf5047a463b25a2fbbf229b58d1c64b5d3e54c3e6b4139c0ddb79dbd8844533e5d29adc26892669393e021c30adfff55ae17b00ee
SSDEEP
384:uiUuQ+5ycUNblPV27CT0I8roTuCdHo/Mst3Hcx1btAfzpkHaiIeQhpfi/pHP+H8C:uKFAcCLT0HUTuKw3Ub6+jZEfsPQ87DI
Checks for missing Authenticode signature.
resource |
---|
f07b4c32eeed7a58e152ebfe5a42959c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NdrOleFree
HWND_UserFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE