DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ba6572a2f83518faed30da4567c21f61_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ba6572a2f83518faed30da4567c21f61_JaffaCakes118
Size
369KB
MD5
ba6572a2f83518faed30da4567c21f61
SHA1
461b0122086d30382b90fb20152e74e2ebbab6c4
SHA256
37650abc2109e8c08a793e3731137c67886ec2ef56c23b1b693ea760122644d0
SHA512
568b0a8e050fc37a342b3349b0e36aee2aba949c9d261a767f756f23e0e696b88e782937f1208a0c3b3e1533a6bbe67842cd0527214f95c749618c69cc9f5d2b
SSDEEP
6144:bnZTyiH3GoQYPH9DqOUSnhshTTmXXYQOYXoFomXQTmnRhzkyW4GzlWHD:jRyAxQgHhuTTmXIHYXI6qwT4sl8
Checks for missing Authenticode signature.
resource |
---|
ba6572a2f83518faed30da4567c21f61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SysFreeString
RegQueryValueExA
GetKeyboardType
UnrealizeObject
VerQueryValueA
IsEqualGUID
_TrackMouseEvent
InternetSetOptionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE