DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aa70ef973411770294a04ea11b675748_JaffaCakes118.dll
Resource
win7-20240729-en
Target
aa70ef973411770294a04ea11b675748_JaffaCakes118
Size
118KB
MD5
aa70ef973411770294a04ea11b675748
SHA1
f3cfff430cfc7eca51049b7c40d85f89d479cb2a
SHA256
9639be9b6aeb2a723b7739126c92a41f7baadb6d001ab90f92707ecd9086488a
SHA512
7685b51f5185fd2e72df2ce23a8a24548b67f1ec942aaca8cc67d7874d2a2aee7d4e6b9db60f44a0ca321d8428bce8dbbdc396f9e55c0406e19a8e3dbb62e94f
SSDEEP
1536:NwSphH5/WHBDjKHGd6Z1BVoFRRMI1/h2b66VeyDA3jgHMHO/REys/6rnna3cjfAH:GCpWHBXLd6ZQjNx+Q8WyaKna3KYS6z
Checks for missing Authenticode signature.
resource |
---|
aa70ef973411770294a04ea11b675748_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE