DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
944fdfa38e683dc3d3f1ecb0caa6a4cb_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
944fdfa38e683dc3d3f1ecb0caa6a4cb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
944fdfa38e683dc3d3f1ecb0caa6a4cb_JaffaCakes118
Size
13KB
MD5
944fdfa38e683dc3d3f1ecb0caa6a4cb
SHA1
2dc9ac53d2b2012c779adf4693c2013027967ce7
SHA256
71351a293c5ec1aff3421dbb2cf5e982dd3e037868e158fd950f30cc6c5ee0e7
SHA512
374c5f413ca6dc468959eb78e43f94acf604e8f4a6d4d3adef4feb89a8ce768fa891b23ba865e75f8fd13e8d9b5e259d477153eaa06a89fc52aac1cea56ef389
SSDEEP
384:JNhaKroJ7EEU4aFr2/upghuR6YpHW9gHW:JNUKroGE+pqi
Checks for missing Authenticode signature.
resource |
---|
944fdfa38e683dc3d3f1ecb0caa6a4cb_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CoTaskMemFree
IsIconic
ord18
ord215
ord123
SysFreeString
ord153
CreateIUriBuilder
InternetCrackUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE