DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
37e0e9e556a0e3bf6be2777c14d486bd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
37e0e9e556a0e3bf6be2777c14d486bd_JaffaCakes118
Size
118KB
MD5
37e0e9e556a0e3bf6be2777c14d486bd
SHA1
9c8751a74e1eda860968e3dc0977477deec0b592
SHA256
d484061a3454a254b31ef80d70117e8b5008f1f74be0673a0d6d493428aa55f0
SHA512
5aa4b4c277b35379a53e79813302b6fef882eae5816cad6d22adbbb5a4f7e9876686da0a056cdcc731e18410ea01e669f5af3c76847f8ca6f54d99cf19a44948
SSDEEP
1536:qmuCV/mPL8BdsioVn0eoCBnzdokzLvQDKJ9NQJ8lahK2iUFAjfBiKn+DH+e/eS+B:qm3/mPQ+VnKCBnfzx9cKcasKGH+em9wU
Checks for missing Authenticode signature.
resource |
---|
37e0e9e556a0e3bf6be2777c14d486bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE