DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6db5b68522f81f80aef9b6d99094d1a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b6db5b68522f81f80aef9b6d99094d1a_JaffaCakes118
Size
118KB
MD5
b6db5b68522f81f80aef9b6d99094d1a
SHA1
b5629dafda41700c78cf95fc439da01613bfa336
SHA256
3fb420d43e94cabb713d0f3a83efe614100dfd61e146ecab426fa86bb013c672
SHA512
210b661140c19f88b20ee1753f5f10964161c9738dea1c4f4d4cc459e20e82628305faf7c0c1580197e52a344cc3e2f783481609cffe8113c28a6f45c54db8dd
SSDEEP
1536:NwSphH5/WHBDjKHGd6Z1BVoFRRMI1/h2b66VeyDA3jgHMHO/REys/6rnna3cjfAq:GCpWHBXLd6ZQjNx+Q8WyaKna3KYS6W
Checks for missing Authenticode signature.
resource |
---|
b6db5b68522f81f80aef9b6d99094d1a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE