DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0dd1f682ab930d467818ff95fb2e5733_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0dd1f682ab930d467818ff95fb2e5733_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0dd1f682ab930d467818ff95fb2e5733_JaffaCakes118
Size
410KB
MD5
0dd1f682ab930d467818ff95fb2e5733
SHA1
48427ef05d8120ff18a78221f1c56cf2c159fd53
SHA256
c7340bcc0e9a6d40a6f7376224ae3c33f8e8b69dbbb37f792819962165805fa0
SHA512
38895589dbc2a0dff979d1eca6f5293dbd5c371d6bcb2aedae867f6c1dcdb98bf9f016c049836ca0eeb0e503eaa6e9656197e804ddda232fbe88d95082130269
SSDEEP
12288:mb7+n9N+mw9nFERNYi75rFcUNQEbQBgKvWXQW1V0vLW:mb7+r7YaRNDdRPbMW1W
Checks for missing Authenticode signature.
resource |
---|
0dd1f682ab930d467818ff95fb2e5733_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegCreateKeyA
ShellExecuteA
SysAllocStringByteLen
InternetOpenUrlA
inet_ntoa
UuidCreate
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE