DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
89f4d83077af8b1cc8c6e65e90203fb2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
89f4d83077af8b1cc8c6e65e90203fb2_JaffaCakes118
Size
100KB
MD5
89f4d83077af8b1cc8c6e65e90203fb2
SHA1
36234a8ad3d86320439068029510ad7dc9194c36
SHA256
64befc741c7016188f3dedbc750cf18df8de079605587962f845f0429acb2738
SHA512
945d15896d27f6a65abfe2c383125d754f1cf1d0930a59f8e47b9839f2693107f28adb233408733031b4fbc062eef8b392512678cb84235c3cd46f4a3c186e11
SSDEEP
3072:GjoHhStDPrIQDar9qesdk9pInh9wLQmdlpnY:GjkhoItr9q/dLh9o5Y
Checks for missing Authenticode signature.
resource |
---|
89f4d83077af8b1cc8c6e65e90203fb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegCloseKey
IsEqualGUID
VariantCopy
SetTimer
InternetOpenA
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE