DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d0f9db6e6ffbc0266626dbc1e53950b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2d0f9db6e6ffbc0266626dbc1e53950b_JaffaCakes118
Size
151KB
MD5
2d0f9db6e6ffbc0266626dbc1e53950b
SHA1
26de22c70db65ca04338551d411736633eb5ea1c
SHA256
de7b4b14462a3ddc8cc43c182ad96a84c8a35787b9a2941b9db4ebb7cb2a704b
SHA512
f34829047d2824fab7030746dca20ab573810e84ef2efffbe2943fcdff98fd11d9bfa08bcb19d05de21fc74cbb5d79ae4d17905314953cc5d23d263d0af7a31a
SSDEEP
3072:DqSDOLYI+gWeit52URa6X38u697MuEUmlm/FIB6eFvDBpwct3rDjKENx0R/EkRc:9DOLYIlhG2URa6ng7CUmA6LFr/vzsNv
Checks for missing Authenticode signature.
resource |
---|
2d0f9db6e6ffbc0266626dbc1e53950b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryExA
GetProcAddress
LeaveCriticalSection
URLDownloadToCacheFileA
RpcStringFreeA
RegEnumKeyA
StrRChrA
HttpOpenRequestA
GetParent
CoCreateInstance
SafeArrayCreateVector
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE