DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42365070ccc957b95df41e16f43c26d9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42365070ccc957b95df41e16f43c26d9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42365070ccc957b95df41e16f43c26d9_JaffaCakes118
Size
105KB
MD5
42365070ccc957b95df41e16f43c26d9
SHA1
9a825f30474c7bc04a724ba4e905fdd650dd954e
SHA256
bda2dd77af14b1396bffc1959284fb5ac050336289b537d9802214477acd3942
SHA512
8ec60068652d89e75a5c91c8781bdf86759155af193aa3170a03f426bae35ca5385aca7f52d39af9a32641bce6dc10c9dcb620150d91f1d8928b46693195c5ca
SSDEEP
1536:jHVNZlPNhPo+CMN+pF7tl7MRCzfW6woNFTZ1IapURFfXxBSPS41gEtuahLdjO4mB:37Pr7CMiF7tlsUfW6wcaapULxegU/EI
Checks for missing Authenticode signature.
resource |
---|
42365070ccc957b95df41e16f43c26d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ord2982
?terminate@@YAXXZ
LoadCursorA
CreateFontIndirectA
SHBrowseForFolderA
CoCreateInstance
LoadRegTypeLi
URLDownloadToFileA
_VMS_Cleanup@0
??0_Lockit@std@@QAE@XZ
VerQueryValueA
ord22
ord1
sndPlaySoundA
ord15
gethostbyname
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE