DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
635087b28ec8777658ba18abd0bec921_JaffaCakes118.dll
Resource
win7-20240705-en
Target
635087b28ec8777658ba18abd0bec921_JaffaCakes118
Size
117KB
MD5
635087b28ec8777658ba18abd0bec921
SHA1
fc8d00ff9c61e60dd7b329bada20067173c520e9
SHA256
6ceb1b3daae755c7fef2cfa8765db94656f780c1ad593e9eaa206cffae90ec8a
SHA512
3724b4440587260291f45bb8cae9f88b774f0ce3c360a40c66b35e49686bd93f3483ee49e6f829828c8055c3245147b15b0360a1f33a3f2012cc17d113291199
SSDEEP
3072:zo2Zo7DtNfZLkCCY/Rddu4dejePxd7iY7sBVcMT8iKGs:E75Nf+CP/9Ije3N4Xd8us
Checks for missing Authenticode signature.
resource |
---|
635087b28ec8777658ba18abd0bec921_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE