DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c165eee2a99ba6809693fc282dbeacae_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c165eee2a99ba6809693fc282dbeacae_JaffaCakes118
Size
9KB
MD5
c165eee2a99ba6809693fc282dbeacae
SHA1
6c77c7e51b78e02c2d3a451ae8224577352466c2
SHA256
95dfbe686ea36abcd50a54d6db7d1bedba3691592fb8b9f54a2b591af4324835
SHA512
7ffe7bc4153d8fbbde75b07b38e5a2f465008cbe7114eafea4b877b6f74091cd3fbc1b346efaf11c1dbb3a2e0e435d8042376ab3134f6276cac4fe14b0fe1a88
SSDEEP
96:LMKP3sYXVY0fHXncn3IbayjR81rWwVlEoxA5tmFjOcRowzkC8Cnko7caPd9B:LMEq0hba6R8YwUgA5tSjOIowAC8WUqP
Checks for missing Authenticode signature.
resource |
---|
c165eee2a99ba6809693fc282dbeacae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE