DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0249fbe699f6cc74540a4c6a818f6010_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0249fbe699f6cc74540a4c6a818f6010_JaffaCakes118
Size
118KB
MD5
0249fbe699f6cc74540a4c6a818f6010
SHA1
f86379f4b4e4b0d3e71977f19bb4771d26bacd61
SHA256
779e0c6f4e300d834bdbc3bf17ce53a4cbd9701850e291967aad5219a643b658
SHA512
b5e8a5485acc701b946d5b7f124ddf45c0647bb0e2d455eaa6046e9b86a42eafbc0f2f56ed94eb79481b3e5a7c9f25a4e0980783dccd3f404e01d374ba82680e
SSDEEP
3072:RXN5MdJKeQYlwovHGCP8oNOdKOFp5+wpxF2hfM:R9MJKej01DgOTtxsfM
Checks for missing Authenticode signature.
| resource |
|---|
| 0249fbe699f6cc74540a4c6a818f6010_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE