DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6f262473725cbab14748677139ba99cb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f262473725cbab14748677139ba99cb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f262473725cbab14748677139ba99cb_JaffaCakes118
Size
410KB
MD5
6f262473725cbab14748677139ba99cb
SHA1
1a8a656ce2331dea0d37c9aabd7a2fab7e652523
SHA256
5c0d89a55e9d39839959bff69d1a75f6aa204cd3e3466a49188997fe30796bc2
SHA512
75746e5216ff1785670841798bc54e9627df65aa465576eb4985ffb4263d4c2eeb63683a08f08cef58352dd657df16a621d18ba185e630b46e38dd345fa998a3
SSDEEP
6144:FtqxJpu+dDwPvx6ZYVG7Bgn0gCk1bgu2zOHIR/oytlE+AlOuNicGx3fdncbOTf:Ftzdxkd7BkbgpRwyY+AU/tGbO
Checks for missing Authenticode signature.
resource |
---|
6f262473725cbab14748677139ba99cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegCreateKeyA
ShellExecuteA
SysAllocStringByteLen
InternetOpenUrlA
inet_ntoa
UuidCreate
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE