DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f76e61066cf0083f88479444fcb13cf9_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f76e61066cf0083f88479444fcb13cf9_JaffaCakes118
Size
9KB
MD5
f76e61066cf0083f88479444fcb13cf9
SHA1
b1645b5dac74c4138c8bba4caf32ec03ff5e0d84
SHA256
2c48bda0a5ea211906fa4b7d434e2ca1adb475425db143e0bbad369977fdf531
SHA512
8a6d76d79b9e89c2cc0224ad304338f1728460681fcf0f370e0c86021be07fbf0e4b711502b80463576436eb4c0469f39644dabb5e66d3292998c85fb92f9b9f
SSDEEP
96:L/DWEVTJ30In93n3LLvf/DnWhDsA5trFzjk+7VP8mx6i+onVMB:LKKEIntTznqIA5tZnk+7im6i+onm
Checks for missing Authenticode signature.
resource |
---|
f76e61066cf0083f88479444fcb13cf9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE