DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6541629f0cf4d530e869fccc9a74767b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6541629f0cf4d530e869fccc9a74767b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6541629f0cf4d530e869fccc9a74767b_JaffaCakes118
Size
510KB
MD5
6541629f0cf4d530e869fccc9a74767b
SHA1
f7c7db9bdaa46b1f9a362d2a1b72e21e5f99fb77
SHA256
c3632b1d1b542af0709ed56d156b33feee95cf824bdff09e6b7348133bc4ba06
SHA512
f62a5614ac1cf7623cb18b79b5e601b1788509ee7706111a2d3e73afc9e47ca917264665017a93882bd05a5db7140a2301bda92eeb05e93cc03df6f1f442cc14
SSDEEP
12288:ptDKVudkj0piCMIVkrBCIpqqju53Qd5qqU0xC3Ou9T5:bdA0ptMrhu53QDk3OI5
Checks for missing Authenticode signature.
resource |
---|
6541629f0cf4d530e869fccc9a74767b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
IsEqualGUID
ImageList_SetIconSize
InternetSetOptionA
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE