DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a01d939e0de905a25173be580de290b3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a01d939e0de905a25173be580de290b3_JaffaCakes118
Size
815KB
MD5
a01d939e0de905a25173be580de290b3
SHA1
549f15a09b35af54f8fa85bb57bcc306db204cca
SHA256
c18094d26baeff0b6ea48da851baad02845cf89607904a1ced8871d2fc6ce89a
SHA512
cf16604da0013449dabd3eb62a711179d450c3ba1b2cdb3f88d1925eceb5812601f12e15b573332984cbbc33dc1ebec9da3fc40c26559c4ed6e73a0044a52dbd
SSDEEP
24576:pNqmakKDsbAfUgMyw/lNqmakKDsbAfUgMyw/R:p/DGUgMyY/DGUgMy8
Checks for missing Authenticode signature.
resource |
---|
a01d939e0de905a25173be580de290b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
IsEqualGUID
ImageList_SetIconSize
ShellExecuteExA
InternetCheckConnectionA
SHGetFolderPathA
timeEndPeriod
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE