DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8bb90f9988579f2db37ad20ba7b5c0c8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8bb90f9988579f2db37ad20ba7b5c0c8_JaffaCakes118
Size
460KB
MD5
8bb90f9988579f2db37ad20ba7b5c0c8
SHA1
5ee914763ac0c1c6254cfb848463ac764a7e1044
SHA256
77937767ad5629a53708c5a376f8c601b61b9aea8619ab77441ec3afd6078a53
SHA512
f075abfc22ad770632abee3f755177aa7dbb735a2db4cdb9b02970e025cd3549780c62d682a9766a356fd37b578612795949785efe5b2672e0719325c829eab0
SSDEEP
12288:0C8hlMqScEy49WaWl+TeoNCzi2vEcnWy02uWyy+PQR:uhlMqSs4otGerzi6EHGuUkQ
Checks for missing Authenticode signature.
resource |
---|
8bb90f9988579f2db37ad20ba7b5c0c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SysFreeString
RegQueryValueExA
GetKeyboardType
UnrealizeObject
VerQueryValueA
IsEqualGUID
_TrackMouseEvent
InternetGetConnectedState
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE