DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
672c0cc64d8be66a1dd613633ca36ec0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
672c0cc64d8be66a1dd613633ca36ec0_JaffaCakes118
Size
9KB
MD5
672c0cc64d8be66a1dd613633ca36ec0
SHA1
4dec2fa8a32a83f59de823fd728d64b6f533df95
SHA256
7ec3f3b99e7944569e12a487bc0f2367e553b73e0747dc88f15c55a49eaa7700
SHA512
4ca5b6f142311331403c9132fc4c2889dbb415ddbb854068d95fc8146cc7cf987ae01fdebd528d1dc4db22843048616367832a3c549092ba403934b6c1d61022
SSDEEP
192:L/strna6M9HAQjLY7a7Y0BA8A5t9nzMRtM/ofbxd:LUt7a/tjeZnzMRtMU
Checks for missing Authenticode signature.
resource |
---|
672c0cc64d8be66a1dd613633ca36ec0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE