DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c164f3b2578b3cbaa9dfb5af86389ff5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c164f3b2578b3cbaa9dfb5af86389ff5_JaffaCakes118
Size
118KB
MD5
c164f3b2578b3cbaa9dfb5af86389ff5
SHA1
fc03e0a3f11510089e6f408378e793b4bb66e341
SHA256
9456b494861eea6af2ceae774921c2ca9022a401c399ecf94e812a6b76892fd1
SHA512
2191844640f3011f13219ff62c899d4530d3511018176a87b8aaf70356ea4df2b0e039fc49f358af0431fac612041f8fe6fb0a97d9fe9a770a3e836768f904cd
SSDEEP
3072:Iyg/5V5t50e8CiyH14deybWsIe4Nv79jrHkcnKeT:IygHxgewIXjHnx
Checks for missing Authenticode signature.
resource |
---|
c164f3b2578b3cbaa9dfb5af86389ff5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE