DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b39f2945e35b98b29ee915cf941578fb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b39f2945e35b98b29ee915cf941578fb_JaffaCakes118
Size
119KB
MD5
b39f2945e35b98b29ee915cf941578fb
SHA1
e312d8de749b27ce8b49b20986e391c002748861
SHA256
d530f65d543963bd00725235be90cbd9daf61416a370c82e9d0fa3a558445b49
SHA512
227ea8c865a583d0fdb4bb0d38cc67666a2537ea9e58a828db92bcc7517612c758213324e5340dc488cd4ad9d85aaf44130b154439876fe51e5edad050ec92be
SSDEEP
3072:sOOoW88gZyQadj8vVTDV0jOOsbYZlteq71lfIOW+MuM:sOOov8g0Qp9TDKyO4YZCilfI51
Checks for missing Authenticode signature.
resource |
---|
b39f2945e35b98b29ee915cf941578fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE