DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
25795ef1212c0b6dae9d2f05874cf60f_JaffaCakes118.dll
Resource
win7-20240419-en
Target
25795ef1212c0b6dae9d2f05874cf60f_JaffaCakes118
Size
17KB
MD5
25795ef1212c0b6dae9d2f05874cf60f
SHA1
f35133d3257a479c06401531ae19350c517067ab
SHA256
ae611ab6f3d3a29c313ea5fe350ae66a3c9157597e238f170c541c237c044297
SHA512
f5d7aff16e0b903eee88672f45de4cd38a072322bfb5e1d7b9ad1bafbcc56c7b1d2ddecdfb1197556bd09ba18b3072507edde60408faf21c61bc40587eaf7672
SSDEEP
384:2+nKKDbB0mE8rHHRl+dDkWEXOJa1uoSA0wgTa3e:tB0mvrnkouovO
Checks for missing Authenticode signature.
resource |
---|
25795ef1212c0b6dae9d2f05874cf60f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InternetCrackUrlA
recv
wcscmp
ord30
IsWindow
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE