DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f09dd7bf2c18287c82cce63e7da843c5_JaffaCakes118.dll
Resource
win7-20240215-en
Target
f09dd7bf2c18287c82cce63e7da843c5_JaffaCakes118
Size
152KB
MD5
f09dd7bf2c18287c82cce63e7da843c5
SHA1
c9a2b60a6ad3e61089f26941e8ed236e5cdbcff0
SHA256
b0f427fdf58ed305e1080c632d47aa19211060fea2709a6b52232ffd6a0de20c
SHA512
17c1cb9bde20be8f66351bf848894de2540fdc24d8fcfcdb8150ac440b5220e984f3850e5576e2dbaa41df8aef4a65c443575fa86e0dba4310dcd02c17f6a9fb
SSDEEP
3072:cFjksmNcg9jCGA8MHthJbSdJLnn/hH51b2wL/A/pkE9cfRFP/4/iXApd/a:c5Gag1CGAZHt7bSvn/NnaK/iGm/iOo
Checks for missing Authenticode signature.
resource |
---|
f09dd7bf2c18287c82cce63e7da843c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryExA
GetProcAddress
LeaveCriticalSection
URLDownloadToCacheFileA
RpcStringFreeA
RegEnumKeyA
StrRChrA
HttpOpenRequestA
GetClassNameA
CoCreateInstance
SafeArrayCreateVector
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE