DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b5bc7ad15f39d96df6030104b7f32234_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b5bc7ad15f39d96df6030104b7f32234_JaffaCakes118
Size
17KB
MD5
b5bc7ad15f39d96df6030104b7f32234
SHA1
65b4a8b0488cf0f369d25431530a056c8d366bbf
SHA256
87cf6fa30e142b6563c7a2330ddce1d29aff51ef22591e5ddf3efe7e4856a931
SHA512
bb1252059d9983b9d80129849d325097170dbea9fec521263d3ade637940bb8a6f5b8b8c9476093a20544bcaa09a85c9866a24fa27f368ad0c7cedba2261d4c4
SSDEEP
384:FMw9BSgb79xitG3HZnF0Ylq+hUqV1EjWKo7TxtCb:FMOBH7neG35Frsiwq7fxQb
Checks for missing Authenticode signature.
resource |
---|
b5bc7ad15f39d96df6030104b7f32234_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InternetCrackUrlA
recv
wcscmp
ord30
IsWindow
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE