DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b543c07447d833efa216668d61bc027b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b543c07447d833efa216668d61bc027b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b543c07447d833efa216668d61bc027b_JaffaCakes118
Size
39KB
MD5
b543c07447d833efa216668d61bc027b
SHA1
a4b9efff1266dcaebda9918594c7ccf0e27c2949
SHA256
333cfc4b23171a0842d93bd0bc64e3b0859c89e99a4d5241709df86aa2120621
SHA512
f3d03fd0aa809224ed661a493a933ac22474a754d1a6f300d79b2342d205984954054d05d365098ef31eeb77f17913c55b23ac26a4dd8cec3ac470c436293f41
SSDEEP
768:o1rXDxs+mouLzStXL1Ea88UtJM5yAuqvlrgpS24p07D44:MHZuKBL1EVJ5b4pH4
Checks for missing Authenticode signature.
resource |
---|
b543c07447d833efa216668d61bc027b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
InternetReadFile
SHDeleteKeyA
wsprintfA
RegCloseKey
ShellExecuteExA
CoTaskMemFree
RegisterTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE