DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
830e48950dac07fbe59e52670414532b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
830e48950dac07fbe59e52670414532b_JaffaCakes118
Size
117KB
MD5
830e48950dac07fbe59e52670414532b
SHA1
0c0760061c710a822870bfbd68a2eaffeb5258e7
SHA256
084f27ee5d1ec5b4a52ea399d6bfac3a789453cee75bc4850fc7ed4d7358d5b6
SHA512
22f56d2485d4628f56c35023bba6b9d6b4dc7e6dafbcd3c34f597f8f340646f4a2d592f55395415fec46f8eaa26ec77b76b74155abc676787eecfda1d4ada73d
SSDEEP
3072:/L9AgqpmY3QP/2suB0hUuB3eBpH1F/hXu5dBorrzJa75HZliP9lhYXvnrKG:T9GoYqfu+UUi/qBo3zJM5HKV/YfL
Checks for missing Authenticode signature.
resource |
---|
830e48950dac07fbe59e52670414532b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE