DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ac45bd613398721b68ad318e7c164eb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3ac45bd613398721b68ad318e7c164eb_JaffaCakes118
Size
119KB
MD5
3ac45bd613398721b68ad318e7c164eb
SHA1
b32ad16ba089e31ab920832e5b854a8e1ed2e3f2
SHA256
34965981d0b1683cfc83b5d0acb1279697231ff0f647d2ad741d6325281b602c
SHA512
4f59a79d7a8261c68bdcf5ffc7c3687fffa1b8b9996162778bc7146cb1f25941fb27c9d932eb8f3b1d2773f1c984b967497a4c3298590bd0e8e229bdf5c3824c
SSDEEP
3072:Fkj0K2/MulWpumqWuqz9rXoVILaZLfKfNhJs7iT5:i4KoMk1xqh4PZrSdT5
Checks for missing Authenticode signature.
resource |
---|
3ac45bd613398721b68ad318e7c164eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE