DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
23ae0ec494d64aa5e6b4af6a04e53ad1_JaffaCakes118.dll
Resource
win7-20240220-en
Target
23ae0ec494d64aa5e6b4af6a04e53ad1_JaffaCakes118
Size
118KB
MD5
23ae0ec494d64aa5e6b4af6a04e53ad1
SHA1
989cc22196575e8dd04e23900fcd79fe26e762bb
SHA256
5a8196ecb899e6fdcc8ae471c0505a51826afbe0c7b4eadbec64ec400a8e3ff3
SHA512
a388c29d834fdbc173df05349505682a9fe0bfecfab705a4cf998b65a9579cbd90430547966766e84b370a13928572334fd1b7a5bbc92c54edcaabb647b5cb8f
SSDEEP
3072:MG/bllw4d66u11ypU6AngFO58rMmIuK7cxj:Mo1ufy9FpBJK7cxj
Checks for missing Authenticode signature.
resource |
---|
23ae0ec494d64aa5e6b4af6a04e53ad1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE