DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f34b359c150b2e056ae0e5ba295bcc3b_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f34b359c150b2e056ae0e5ba295bcc3b_JaffaCakes118
Size
128KB
MD5
f34b359c150b2e056ae0e5ba295bcc3b
SHA1
6cf42f4756fe879751b658fbd93a8f6e17697e93
SHA256
8a61f1477111b70747112ffd84bcadc9b5d7cc8daed7b9aa6a2793078da7e183
SHA512
373f43fb0b711a773b2e0d1e7e3e2d7b74b95082ce19f539e537ab0048b1f0fabda45e836121ca827fa6ca5378270c5cf81eb397fe3cd591701e7d49374207f7
SSDEEP
3072:opK98JxPx5FjjlQUWoUpoY5dEWP+LyWaW0FvkIHZa:d8JxnllQUWToY5qjXOsIw
Checks for missing Authenticode signature.
resource |
---|
f34b359c150b2e056ae0e5ba295bcc3b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE