DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
af47dbd4b7c8e480cd56f9db96976c85_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af47dbd4b7c8e480cd56f9db96976c85_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af47dbd4b7c8e480cd56f9db96976c85_JaffaCakes118
Size
19KB
MD5
af47dbd4b7c8e480cd56f9db96976c85
SHA1
68db5589de239704bb42576470b03f9cac5243f5
SHA256
6f4755cf2af994ac504852291311f077414975b68494a1b4e4d48139d581287a
SHA512
780a11baaa8dea6774d3accef9d54733f040c66e4e4801f0ced65a82b9e40b69f54756edc47eb99f6e677fa8ec5b8d9b7ec234eb99a9c0abf4ff6b85f11553f8
SSDEEP
384:77ybrP9tPjA+X1oq8rl5KHxQBwm4urgFzHLhC:gnX1fKoRQBwm4KozHLI
Checks for missing Authenticode signature.
resource |
---|
af47dbd4b7c8e480cd56f9db96976c85_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UuidToStringA
recv
InternetCrackUrlA
strchr
SHGetValueA
ObtainUserAgentString
wvsprintfA
CoInitialize
SysAllocStringLen
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE