DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ed3e3e8e0dff97a1c4e32d485ec8fcbc_JaffaCakes118.dll
Resource
win7-20240221-en
Target
ed3e3e8e0dff97a1c4e32d485ec8fcbc_JaffaCakes118
Size
66KB
MD5
ed3e3e8e0dff97a1c4e32d485ec8fcbc
SHA1
e58bc8b4ec0b37b926b2a6b6551f3be28f558725
SHA256
2c4684d91a55534959c291fbc817f5751a329915759472582f1f2ce5a6f0b32a
SHA512
16e3018563eb92fc7487d0ca9e77e949935f1baaf3a628aba1d066b9b12da45ae0f5d6a1d58193ef5689c502e1a7e76b595c05960df9dc7c6f1398d050b3ad25
SSDEEP
1536:1wrw22rccErZ0RFtM+8qARCGAnPn5tCfo6:irBuUZoK+8qAuv50g6
Checks for missing Authenticode signature.
resource |
---|
ed3e3e8e0dff97a1c4e32d485ec8fcbc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHDeleteValueA
WSAStartup
InternetConnectA
IsCharAlphaNumericA
CreateSolidBrush
RegCreateKeyExA
ShellExecuteA
CoInitialize
SafeArrayCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE