DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f629648ab6cd02b3a2934b594175cb80_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f629648ab6cd02b3a2934b594175cb80_JaffaCakes118
Size
261KB
MD5
f629648ab6cd02b3a2934b594175cb80
SHA1
aabc3c9bb4a67f9da41c144d8171aa6b96847b9f
SHA256
59291ade47a9c98e54a6b96e26856484ff8d3190607e9bb9fe903603f9b5cd81
SHA512
82e40f269951bec765152dfbc4e391819133fc426ea6ad8bed7d07debadd3099c691569bdfce677c30b30682432578f84e691ca062748c8096130418175ec86b
SSDEEP
3072:QMKkPoaCtyyyQ6piGjf2WMbx4odBApNSCmYYCK00Vhx/Jus034fJRNQAwYjIGOdG:QO399EGznux4o8zuMu/B0+JRN5INmVD
Checks for missing Authenticode signature.
resource |
---|
f629648ab6cd02b3a2934b594175cb80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SysFreeString
RegQueryValueExA
GetKeyboardType
UnrealizeObject
VerQueryValueA
IsEqualGUID
_TrackMouseEvent
URLDownloadToFileA
InternetGetConnectedState
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE