DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a5061059af13877a925d19040f1c3226_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a5061059af13877a925d19040f1c3226_JaffaCakes118
Size
482KB
MD5
a5061059af13877a925d19040f1c3226
SHA1
164d575d55b3415a62de4e9bb0202dc3ac835062
SHA256
2bc6bd1ac2f418273d7b5589898a7a2a041e6148aa7d09f022aef4c16c6cff31
SHA512
ccf217e2ad6f81b8a5c2be5c7183c17134920db4fc7c62bc068065c9df25dd972e8c156bc7df9669c0d51521bf5f75992287bcbb1c378bf71a94b85cece458d7
SSDEEP
12288:KYfbsxpdrCGmA0Lh1C/KDMnb8O4/CdXAyqIlxI/:KYzsbdVQh0/KJ/eQyzXo
Checks for missing Authenticode signature.
resource |
---|
a5061059af13877a925d19040f1c3226_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
WNetGetConnectionA
VerQueryValueA
UnrealizeObject
CreateStreamOnHGlobal
ImageList_SetIconSize
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE