DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
38f2b836e91b0c1884ca9a381e9ab025_JaffaCakes118.dll
Resource
win7-20240704-en
Target
38f2b836e91b0c1884ca9a381e9ab025_JaffaCakes118
Size
118KB
MD5
38f2b836e91b0c1884ca9a381e9ab025
SHA1
a12375dabcf2571a8e27b8d8b19548bc3042fbd2
SHA256
0bcbbd5431141051d7d16c1b4a3d14e3c97c3bfedba276f584ab42def4b87bd7
SHA512
56a6da4877b8be8a8611596ce52c71a29ba77875432e4030fc47f0be08649e6f523614d51ceffe800da7484c42747f607b85ebd34217d008574b840af22b8eb7
SSDEEP
3072:Dfkb0SZB72TyWTu3ax/k2xoeC4lr7ZWoUOr5z1huOucQ:Dfkb0SH7ayzI/y4lrrp/0OA
Checks for missing Authenticode signature.
resource |
---|
38f2b836e91b0c1884ca9a381e9ab025_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE