DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
675cca38ce8744932e2b7b5378ebe136_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
675cca38ce8744932e2b7b5378ebe136_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
675cca38ce8744932e2b7b5378ebe136_JaffaCakes118
Size
18KB
MD5
675cca38ce8744932e2b7b5378ebe136
SHA1
bc60f352790b17c1ad43cb719096aff89c01de3f
SHA256
85c1d67c4997afc02b0487ef01683c663e09d364a83e77266db857858adf6f23
SHA512
2112e99d063a5c26a1303784f5116146b26a57ac1f85832f96321556dea0bfd0521108954e62fd29910e08797e017fee74f23c43fdfb19cab35e06c0f755c5dc
SSDEEP
384:e9N3iFrJ+d9eNJPgQwMNKccxpg8PCya0h2xfAtn:eLy1wdoC9ccxCOX2i
Checks for missing Authenticode signature.
resource |
---|
675cca38ce8744932e2b7b5378ebe136_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
URLDownloadToFileA
wcslen
wvsprintfA
SafeArrayCreateVector
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE