DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
057f41834f8bd05c5c85fcb02724ad70_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
057f41834f8bd05c5c85fcb02724ad70_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
057f41834f8bd05c5c85fcb02724ad70_JaffaCakes118
Size
19KB
MD5
057f41834f8bd05c5c85fcb02724ad70
SHA1
4abd64aa75260e72fe66c5ec9c8973d6c04df468
SHA256
3ca3ba5f87cc096bb4b5e7d50bd59ec0388477443224b4d9671524aa5a32c612
SHA512
1ea7186e630510ea3044c4dd64776f6db7bad048ac9ecee9eece430b5308551547fa78a4adf41547e70ecc3a1d090882197d3238d24ed5994754cadad725651f
SSDEEP
384:DzgnGeF9z6YoLN7yK41gVM5VbotaWiMdl/FjfAELhC:wY141goVMtaWZdl/JfXLI
Checks for missing Authenticode signature.
resource |
---|
057f41834f8bd05c5c85fcb02724ad70_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UuidToStringA
recv
InternetCrackUrlA
strchr
SHGetValueA
ObtainUserAgentString
wvsprintfA
CoInitialize
SysAllocStringLen
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE