DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6a7b3768237b5c660472740985c27822_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a7b3768237b5c660472740985c27822_JaffaCakes118
Size
9KB
MD5
6a7b3768237b5c660472740985c27822
SHA1
621e669bc78423a08424aa08114dba67ab66b21c
SHA256
ba47354d0169006c2d85103bbb8996936b9a49fad2add935d53852c0cdafff19
SHA512
02441f353bdd68db81b60992429becaed5de3736ab91be87b6399294a09f1331dba8f0a3ac61aea415f654bc11dd38e4b4658d8564e945a19a5da1adc984596f
SSDEEP
96:L76hhLc239XP3H327ff3/JDnWEbpnc1YA5tZ4FZKm6jVs/UMjktJsOECJ7QMB:LYJOzFnv9RA5tZwZKm6FzEC5
Checks for missing Authenticode signature.
resource |
---|
6a7b3768237b5c660472740985c27822_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE