DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
04c3495b0fcfe2e5f48f6d1be2201cbc_JaffaCakes118.dll
Resource
win7-20240220-en
Target
04c3495b0fcfe2e5f48f6d1be2201cbc_JaffaCakes118
Size
221KB
MD5
04c3495b0fcfe2e5f48f6d1be2201cbc
SHA1
409d20f74aa07ccda6e19bd44d9e81a8dd40a88d
SHA256
70241da26c36203cd83036175cf8afa712cf567e0240e10a7cbbfc356d3d51f1
SHA512
be8d8d7879a64e7a30df7959f86b9120f059db13a516303846cf8c913832528d1e941429af471ee6c5a571790017522b96e715d70a0f9e46efda1cee61007e5c
SSDEEP
3072:yAGTcXxOEUg9kt2ESGZNYWsGSdHYLUpKFald3N1MeD3fCtI/5SPfnzVHnzvz/u/Z:ylqv9Aw5dh8UXN13D32mSPfc0i5
Checks for missing Authenticode signature.
resource |
---|
04c3495b0fcfe2e5f48f6d1be2201cbc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
IsEqualGUID
ImageList_SetIconSize
ShellExecuteA
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE