DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e78f2801c7818430807582d9f4a1186c_JaffaCakes118.dll
Resource
win7-20240221-en
Target
e78f2801c7818430807582d9f4a1186c_JaffaCakes118
Size
9KB
MD5
e78f2801c7818430807582d9f4a1186c
SHA1
ae709f69ce3932acf29c6b1870070035e31ad553
SHA256
5f41f5d30450ddeeb05246e1bff2fc587aafd37a6b26f02152b758c08386e964
SHA512
488d7ef884541d8edf84788423972072bb56314102fbe8fc2eefce4740f9f66cde695f676a2d77c181c0b0bcdec3a3c550fd97eb48ec5f3494d9e164f71b20bb
SSDEEP
96:Lo1alzXR/GPVLLPWu369JDoiiNGz5PE2GMA5t33oFjfaU6mW377SpvGMXLB:LwazB/GFzWZ35P7fA5t3wjOzrMGMV
Checks for missing Authenticode signature.
resource |
---|
e78f2801c7818430807582d9f4a1186c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE