DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2bdf3cb785830f770359ca728f243f4d_JaffaCakes118.dll
Resource
win7-20240508-en
Target
2bdf3cb785830f770359ca728f243f4d_JaffaCakes118
Size
9KB
MD5
2bdf3cb785830f770359ca728f243f4d
SHA1
4a56c362b56f4a3fa54d381cda3bd70c023dcff5
SHA256
fc476137fd0450ac72d9661fbf21d4d829d8dccb18688f4bddfc325a167dbd44
SHA512
c0796c80000d590a56824dceb9af62322aa0416bc5df54181f09be5685219ce87d00acdbc064dafdc0accc33f01ada987eaf4ff4ae9c84e84b99097968328e63
SSDEEP
96:L7Et/su9CP0l5fbPtCb/fJ7IzFarrXa3XBA5tcFdH+FJkhhCD/KsXB:Le/31rjEz9IxgSA5tEUADCKI
Checks for missing Authenticode signature.
resource |
---|
2bdf3cb785830f770359ca728f243f4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE