DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Static task
static1
Behavioral task
behavioral1
Sample
0fd6a8d4cb920ac3d9b04d091d019a67_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0fd6a8d4cb920ac3d9b04d091d019a67_JaffaCakes118
Size
171KB
MD5
0fd6a8d4cb920ac3d9b04d091d019a67
SHA1
4bbe7eff462175bfebec499472c5661f6ab5be2f
SHA256
f1a2cb1cdc24f66c9331d273829248a20d6d25e4302618e7d28acc90e9d8d294
SHA512
7d77674b357b0ef49b66e2fa23e1e6f23f1c0fbaa3cda7249824c34192da9d97f69f093a324de17e27d9e1168f26cad2564957ebbeeba133142c5651ab8e0ee3
SSDEEP
3072:0zNCVUIFQ3FFg14TFeKzqVuOofufz6lX46Ok8gWNh93mfH7isALtGWT8BD:fFQ3FFUk5z1O+X46OkfWsHlAL4tBD
Checks for missing Authenticode signature.
| resource |
|---|
| 0fd6a8d4cb920ac3d9b04d091d019a67_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
NdrDllUnregisterProxy
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
NdrDllRegisterProxy
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
CStdStubBuffer_Disconnect
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE