DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fe0c59466fada1ab7e86350305abe746_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fe0c59466fada1ab7e86350305abe746_JaffaCakes118
Size
152KB
MD5
fe0c59466fada1ab7e86350305abe746
SHA1
7ad35c74e40c097c94c2b63eaeb90997a081b548
SHA256
c329929649ebe16d3c9e0d00084ba78b1fbae3464e890dc57dec24f95701b05a
SHA512
36752f0c58e14fa75372a53a7f6df36b4c53ff695b66b1ad702d310e6e420372589eaf66ad7c14bc87fe7d7076544a61757696053d2537549d7280f716ce6044
SSDEEP
3072:IvMuE3aYA4nWtQi6TjinfZ/tVs90usQEr23gqHbzY68QBcnMg/aMlcquXX:UErGQiB2bEfq706bBcbaM6quXX
Checks for missing Authenticode signature.
resource |
---|
fe0c59466fada1ab7e86350305abe746_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExA
GetProcAddress
LeaveCriticalSection
URLDownloadToCacheFileA
RpcStringFreeA
RegEnumKeyA
StrRChrA
HttpOpenRequestA
GetClassNameA
CoCreateInstance
SafeArrayCreateVector
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE