DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ecab0a99045f0350a47c272f3c7e55f_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0ecab0a99045f0350a47c272f3c7e55f_JaffaCakes118
Size
59KB
MD5
0ecab0a99045f0350a47c272f3c7e55f
SHA1
bc76d488bb6995a2f36452c0b4c1829a8ab0b689
SHA256
b0374245f1772d202190982d90113cab6ec954d134564d71e83cb954919fb6fb
SHA512
97698a0bc909113829a75e68dbef93e49219e729265b811d9666f36710f379af1f08821f3a7806fffd3bf714c8839ddbcf54d4f9b2d27c33bc27d41fb14e9f70
SSDEEP
768:z9mW70bm82PH3JPMBHBT9ThxPKfn5u289qX9QG6DhvN6d6q2hjNoTBJvoNDUayWk:YWwbsH3J2hiQU9gigh5oTTQUay71
Checks for missing Authenticode signature.
resource |
---|
0ecab0a99045f0350a47c272f3c7e55f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetSysColorBrush
URLDownloadToCacheFileA
CryptAcquireContextA
SHGetSpecialFolderPathA
InternetCrackUrlA
StringFromGUID2
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE