DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1597812f68004bedea160b2ac5c5829f_JaffaCakes118.dll
Resource
win7-20240419-en
Target
1597812f68004bedea160b2ac5c5829f_JaffaCakes118
Size
31KB
MD5
1597812f68004bedea160b2ac5c5829f
SHA1
c1c27146d691ece307c2c2281b55e41f8791bce0
SHA256
f6eddd551c129eb7eb6a72e77d07b9706754a2343269fd83987d8cba40ef5814
SHA512
9bdec4ab647a4a81da0bd84f37dff458c5b3f6491a51cda7d2d4e7e66d422aa32f5623f092164db6e6cded7504874dbf4dd886951235690ee37511b63be393cb
SSDEEP
768:tkiTDYZMzaAtVSJIcyR9h3/P0FaFNs3qU:VDGfUMecyR99/FNF
Checks for missing Authenticode signature.
resource |
---|
1597812f68004bedea160b2ac5c5829f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
MessageBoxW
RegDeleteKeyA
CoTaskMemAlloc
VariantClear
strrchr
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE