DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
409b9cd51db3b4ee13c313f25b01e50d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
409b9cd51db3b4ee13c313f25b01e50d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
409b9cd51db3b4ee13c313f25b01e50d_JaffaCakes118
Size
62KB
MD5
409b9cd51db3b4ee13c313f25b01e50d
SHA1
6099dbd545c9b5cb0f0a5cdcc31e2b181b4c1c8e
SHA256
25d70bee68777362e9576d3d593d27fe8cd63bce4df894bf79e9461803dfe9ec
SHA512
f6019911a98998296879b474ea767eb51733bf8edae0c5903fb72b5a811fe164c2e5306f50c8765eea2407095888df822d7681abda39030fde1367630d9e68f1
SSDEEP
1536:ZeBqAAcorGmCVwvBnOWtZZRsZ8JBmD25eUUE4x/or62V:UqE0pN2Z8JPtkAr6g
Checks for missing Authenticode signature.
resource |
---|
409b9cd51db3b4ee13c313f25b01e50d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
InternetOpenUrlA
IsCharAlphaNumericA
CreateCompatibleDC
RegQueryValueExA
ShellExecuteA
CoInitialize
SysStringByteLen
GdipSaveImageToFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE