DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a58c3b725b11338d71b0e8b88ecf41eb_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a58c3b725b11338d71b0e8b88ecf41eb_JaffaCakes118
Size
17KB
MD5
a58c3b725b11338d71b0e8b88ecf41eb
SHA1
ec262ec3ed1225f10ce16ad474a9b6cb5779efc9
SHA256
d7feaf17ef1bd83c5a53002eddae1a9533bd89ef19e9641ba6c099ee03484f7b
SHA512
c6499e26a89daa9aaf8896a34458c221401224abfe7e1bda6259d7e6032d770aeb1ca511f15867e5ef605fd6756f8f65dd372f1c625b8ff9c43806a4a4a87248
SSDEEP
192:8XUHMZcQeWYx7jPpnANw3TEJkzNuBwTUkiZpagoLVV33tXZKvnQHuanVqan+ZVLU:RO0x7jvjrBZg6g8rVkvAnVq1hBDf
Checks for missing Authenticode signature.
resource |
---|
a58c3b725b11338d71b0e8b88ecf41eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InternetCrackUrlA
recv
wcscmp
ord30
IsWindow
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE