DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ae308a226f445b15b4edf39fabd2dc5_JaffaCakes118.dll
Resource
win7-20240419-en
Target
0ae308a226f445b15b4edf39fabd2dc5_JaffaCakes118
Size
383KB
MD5
0ae308a226f445b15b4edf39fabd2dc5
SHA1
da14e03d2658951e502c2e68212bab1549f9cad1
SHA256
ddce4eb5e5c61064a1fef1c23ee06cceb87fc7189318e65817472f43d8daecbc
SHA512
d8e221d5558153d1daa72b1d0ff31ae65575249b7623205063b96d9293b08f9b745834cd07d74fa4322286e389707643767f60adf52df62c623f364d9f039777
SSDEEP
6144:ay3tNkI+fCf6dTNgAHrpWitqxfw6O2tigetUHEqnrZPMULvicOcyxjTRpceKK99D:RUI866lNgAHrQ4t6O2tigeCpl5vJOcwd
Checks for missing Authenticode signature.
resource |
---|
0ae308a226f445b15b4edf39fabd2dc5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SysFreeString
RegQueryValueExA
GetKeyboardType
UnrealizeObject
VerQueryValueA
IsEqualGUID
_TrackMouseEvent
URLDownloadToFileA
InternetSetOptionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE