DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fb1e0448884277d57c0a19157a5e282c_JaffaCakes118.dll
Resource
win7-20240215-en
Target
fb1e0448884277d57c0a19157a5e282c_JaffaCakes118
Size
31KB
MD5
fb1e0448884277d57c0a19157a5e282c
SHA1
cdb259c79209513fd74e73d951d53534af6d75ae
SHA256
b656970b413cf2356c0c015de40bb39e3881e42ba8c2d06f805368712ef09700
SHA512
05295cb9f4687a92c722cb61f7277007f020278b0081052897d3161c10df38b9d4885cfec5ab83deb3d3d45a686f8ae53ce3a79626d10efffbef15265812be67
SSDEEP
768:f0iTDYZMzaAtVSJIcyR9h3/P0FaFNs3qU:fHDGfUMecyR99/FNF
Checks for missing Authenticode signature.
resource |
---|
fb1e0448884277d57c0a19157a5e282c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
MessageBoxW
RegDeleteKeyA
CoTaskMemAlloc
VariantClear
strrchr
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE