DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
06f4ae99ca3b7a21ae932e57e3bc1fd8_JaffaCakes118.dll
Resource
win7-20240611-en
Target
06f4ae99ca3b7a21ae932e57e3bc1fd8_JaffaCakes118
Size
17KB
MD5
06f4ae99ca3b7a21ae932e57e3bc1fd8
SHA1
8bf35f1c1b5fefc3de564a0deeb120650695a789
SHA256
7f8b239a18f505fccd0c65e5ce524de58cdbb81a8a06fba69cf3c0d07961dae4
SHA512
c8117fbe97cbd77d0afe117dfdb383b06e0506aa03087cbefd28bd5b05a4f993d445d36675ba43116c2e2eaf042c23724ee44cbd5aa74ec4c388d702596065ca
SSDEEP
192:lfz+l1k4JQMYE/nqleX3uDnF0YlqNMSiZrHvRIj6pRmXSUusNpXhWAoCIzW+7awP:SKMTnQF0YlqOhHmjmReNfC2W
Checks for missing Authenticode signature.
resource |
---|
06f4ae99ca3b7a21ae932e57e3bc1fd8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InternetCrackUrlA
recv
wcscmp
ord30
IsWindow
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE