DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
40835901880c10fb25b13c6c464ab3c3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40835901880c10fb25b13c6c464ab3c3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
40835901880c10fb25b13c6c464ab3c3_JaffaCakes118
Size
128KB
MD5
40835901880c10fb25b13c6c464ab3c3
SHA1
2b2acb2008348d2a4f68cccf928ce7434c031411
SHA256
c4b619c4d89b36737549c1d8a5548dfde614c6ddf47ef6b1b208e62e30b2b119
SHA512
cacfe75e23984601f6663d6e3cfa79759a41f75dad3898783c24869aa10c224a48258e182501fcec42ad6e159a5b01578176ec7cb20022d8223e8d95f605d77d
SSDEEP
1536:RFNlOIUvTKROJDXXwGPnn3R9sPaFKz+LY8:/NlOrcQDXXwGPn8PtzGj
Checks for missing Authenticode signature.
resource |
---|
40835901880c10fb25b13c6c464ab3c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord592
ord520
ord523
ord525
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord319
ProcCallEngine
ord537
ord644
ord645
ord648
ord571
ord573
EVENT_SINK2_AddRef
ord101
ord102
ord103
ord104
ord105
ord320
ord321
ord616
ord617
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ