DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetICWCONNVersion
Static task
static1
Behavioral task
behavioral1
Sample
fb6164f3954271b7afb0ac28c6c2cbc7_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fb6164f3954271b7afb0ac28c6c2cbc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb6164f3954271b7afb0ac28c6c2cbc7_JaffaCakes118
Size
23KB
MD5
fb6164f3954271b7afb0ac28c6c2cbc7
SHA1
070ab2761fd8e9db55995d5d7bcfd849d94b0a78
SHA256
e7314b44d93715d3294041e1b86f009ecf92d7b206bb7509f12f8b367ceb4dba
SHA512
8361f5068a8c3a5fea1301c3bd720e24d0385b30013f77ed3872f8a81a4c0095d11865a817de5af426c84b0fe387d8327f853376747757e691bb2e26a0416b81
SSDEEP
384:PxysWK9SNZavGSbNxotayyAyfRhiat0VhIDosh6iGuKuq717vvxlLhW7xl4WX:Pxx9SD+GQnotayybiat0VHsh61uKZ7DY
Checks for missing Authenticode signature.
resource |
---|
fb6164f3954271b7afb0ac28c6c2cbc7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
GetDC
BitBlt
ImageList_Create
SHGetMalloc
StgCreateDocfile
SysFreeString
AVIFileExit
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetICWCONNVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE