DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ce9966aa971f3bd79a8bf1c492132e92_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce9966aa971f3bd79a8bf1c492132e92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ce9966aa971f3bd79a8bf1c492132e92_JaffaCakes118
Size
17KB
MD5
ce9966aa971f3bd79a8bf1c492132e92
SHA1
f57b33b804aa87bf4e1378fa8ffeee85349893ca
SHA256
20e22eb609fa07ce93d4f8743e560f96036ddc5759f368057eea5a733e598156
SHA512
3d182f40b5e5986078f3ca05721ae555cadc2a895072d997fef58a9efcb40d93855255becc37301ef130094a4610636ddc1d162dc22c8c8b6fd92b6b46fe30e6
SSDEEP
384:eRh/rp+6Yf0+NKPXa4gAa8x4CC6xDI/UqcdPktmOZFC:ejE3/AX/D5RPkHj
Checks for missing Authenticode signature.
resource |
---|
ce9966aa971f3bd79a8bf1c492132e92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
URLDownloadToFileA
wcslen
wvsprintfA
SafeArrayAccessData
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE