DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d5a78cd487ebae9a65052725a71b535_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d5a78cd487ebae9a65052725a71b535_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d5a78cd487ebae9a65052725a71b535_JaffaCakes118
Size
402KB
MD5
3d5a78cd487ebae9a65052725a71b535
SHA1
443a948c62133856182d0df1702fd4be3d15e7e6
SHA256
ca63ccb5a5a3c09295866c4dcecc0879bf5ccf3732f475736bb6b8dfbf5d4e8d
SHA512
b91e421c62d63dceef3eceac2ad487fa8c3a062a0740a4aecf69c108639302ffd3904c10408dd8fd10892a6a14ae2beb52a4e71101c23089916d1b8898e073d2
SSDEEP
6144:H3iervA6YXNLTsnmO79XMGwz83ScPrqyToTZJKBM6HWsnu/1AyH/LEyUbsXVOx5N:H0dlOEz+S9yTaDn2u/1A6na2Ojvk
Checks for missing Authenticode signature.
resource |
---|
3d5a78cd487ebae9a65052725a71b535_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegCreateKeyA
ShellExecuteA
SysAllocStringByteLen
InternetOpenUrlA
inet_ntoa
UuidCreate
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE