DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
217b184f6f2a44aa09d0310e61048d24_JaffaCakes118.dll
Resource
win7-20240221-en
Target
217b184f6f2a44aa09d0310e61048d24_JaffaCakes118
Size
9KB
MD5
217b184f6f2a44aa09d0310e61048d24
SHA1
70ffb94456410406f4ce63d6965f49f97a61d903
SHA256
75a7f00800a09ce07e7da58f5593304caece2df9e3657f43e24d5441bacedaf5
SHA512
035462daf3b0430e34b508726cd65bbbcd8d6c4b748ffac3a476b9eb60d6abf2a18e6499d884d5125fe3f3835a38dbc4cff4d832f96ee222733e300da7d459a1
SSDEEP
192:LINQ+g5zlVs/uNl+A5tmWw52k3BAO0CV:LIS6fWw5ZUC
Checks for missing Authenticode signature.
resource |
---|
217b184f6f2a44aa09d0310e61048d24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE