DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5be14dce0bed88041666ca3a9f3f4857_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5be14dce0bed88041666ca3a9f3f4857_JaffaCakes118
Size
402KB
MD5
5be14dce0bed88041666ca3a9f3f4857
SHA1
4a7aa00fd25f9dce2fb6aaa4f50cca546d7e1287
SHA256
17854a3631dd584051a25efc97087ec6493413c9653b5b946bb98773cf55488b
SHA512
ce4a06a08e2699ebacf0353de5c21ad32e4706853d8b3f2b89393632bc167c3dcaf56a82d9966707db7ee47eb501857e43cd294856c8ec7d4e54b966cdee1900
SSDEEP
12288:4+NeaiN0Ze7hBAA49O7aQS5hK5ceg8HZo925NIP7:teECLpiK5ceW8
Checks for missing Authenticode signature.
resource |
---|
5be14dce0bed88041666ca3a9f3f4857_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegCreateKeyA
ShellExecuteA
SysAllocStringByteLen
InternetOpenUrlA
inet_ntoa
UuidCreate
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE