DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
88c7ed64f3e9d00c5225adcc7c6f7daa_JaffaCakes118.dll
Resource
win7-20240729-en
Target
88c7ed64f3e9d00c5225adcc7c6f7daa_JaffaCakes118
Size
218KB
MD5
88c7ed64f3e9d00c5225adcc7c6f7daa
SHA1
51bddb0b287ce1ab9696e1a756caabf21073a787
SHA256
a31bc448a19484281381c5bd328f63709b36a93b44984ff543bfc12c8a76ed3d
SHA512
a50f4a36fdddb60d2bd13cedb50423fe74ab2ad7c1f239a1f7e5bb267f048531642b1e757971d29563bd7cef431220cdefcc283c225473686b26b65e36cb2545
SSDEEP
3072:tsb1iumshpL562/OgJyWXYxQWXgpF6MOlDybGmoc3aD705BXLp2e3XBdiKt1hQg5:eb16shR5Nl1pIlubGm+kLLp2IbiKv3
Checks for missing Authenticode signature.
resource |
---|
88c7ed64f3e9d00c5225adcc7c6f7daa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
IsEqualGUID
ImageList_SetIconSize
ShellExecuteA
URLDownloadToFileA
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE