DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1514f2619674ab74111cc3c78531008f_JaffaCakes118.dll
Resource
win7-20240611-en
Target
1514f2619674ab74111cc3c78531008f_JaffaCakes118
Size
118KB
MD5
1514f2619674ab74111cc3c78531008f
SHA1
b538cd726477108f986ca6215d5627518b160c63
SHA256
4746d613f95750b8d8f61e1209df5f9ba34410dd469d0185ffa575dc220b7f1b
SHA512
0ad60969a4499c27c26965a08d2383d8385e8c492cc4079cbd69249bb5dcebf8d6941bc310123399bf99b44af263c5bd3b081ba874792e2b38989d58b1175a3f
SSDEEP
3072:tvtaw2ciOG6I6FPGTpms5lY/jtqRBIq0YUCYLvU/j2G7in:BN2cD3IqPwN5lUgRBl08YL872d
Checks for missing Authenticode signature.
resource |
---|
1514f2619674ab74111cc3c78531008f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE