DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fef3e3631d49f6dbc907c20d6f6447e2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fef3e3631d49f6dbc907c20d6f6447e2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fef3e3631d49f6dbc907c20d6f6447e2_JaffaCakes118
Size
32KB
MD5
fef3e3631d49f6dbc907c20d6f6447e2
SHA1
5edba0115000bf8b439e5c7990e6566ed01e9aa9
SHA256
e4f585ddbe617a637265c04e6604f9de3f6b273aa4454bff9a391d19b8d38761
SHA512
542da15a5af780896a0ac21aa9179d18fab9b8c323836214c464ef63ac484eb909de1991482bb26dea6d60668eb7813dbc7431d3ade275b29888463d1a74b421
SSDEEP
192:Ub31rznHUjz3SmGzcJp7VSCxUOJiZ6lUFDROUxXfBbVZ87h7JwaBjcNK8qjykm5l:UrtzaMm/l8dQ7EaBjyKFekmcwbn
Checks for missing Authenticode signature.
resource |
---|
fef3e3631d49f6dbc907c20d6f6447e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NdrProxySendReceive
NdrOleAllocate
NdrProxyErrorHandler
NdrProxyFreeBuffer
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrConformantStringMarshall
NdrProxyGetBuffer
NdrConformantStringBufferSize
RpcRaiseException
NdrConvert
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrStubInitialize
NdrClearOutParameters
IUnknown_AddRef_Proxy
NdrPointerFree
NdrPointerMarshall
NdrPointerBufferSize
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_CountRefs
NdrPointerUnmarshall
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
NdrProxyInitialize
NdrStubGetBuffer
NdrConformantStringUnmarshall
wsprintfA
GetModuleFileNameA
lstrlenA
lstrcatA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueA
RegCloseKey
_except_handler3
memcmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ