DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2ea0f5305bfb657d0493f22771739503_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2ea0f5305bfb657d0493f22771739503_JaffaCakes118
Size
118KB
MD5
2ea0f5305bfb657d0493f22771739503
SHA1
bf5fb09128726ac2ceb6afa11dacc28dc643d19b
SHA256
5c10b9bc8dd3d3172bd424b38b14dd742bc205746d2845958c5d0a149216d887
SHA512
ae4f54f9d5afa1271b58e489ed89ac292bb706929e5a586678ee772e6578f30e9368d865254b227abb98c3dff05868b35c8f90f1c8a340da6b3c36c220125263
SSDEEP
3072:RjuqIkHXMZG17Ika6YC46T+uYRvozi9rXVAxJ4p:Rju4HXR17IX6Yl6TDYiiJlAxQ
Checks for missing Authenticode signature.
resource |
---|
2ea0f5305bfb657d0493f22771739503_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE