DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1925122bd634354962babe2fb408e2a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1925122bd634354962babe2fb408e2a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1925122bd634354962babe2fb408e2a_JaffaCakes118
Size
17KB
MD5
d1925122bd634354962babe2fb408e2a
SHA1
ee0052b8a14a41170aa571f9381e4d824c40ee8c
SHA256
92a8544e9c32ee54c75b423ec0ce243c61c41a482c74e16c128ec5c602ef229b
SHA512
5b9ff46fb5cd80037ed0598518a72e54af51644172a3f6bf62dd62a3ac9831fe19a0e58032f191fc9a8f6a26f467dd3f022c120252bfa0df08bc8d29ad6ec91a
SSDEEP
384:zNOTOTXSCQGqo4V1W+6mX3lSYqMYLx5KbiqzD:5OSTiCQI4hopLjKbi4D
Checks for missing Authenticode signature.
resource |
---|
d1925122bd634354962babe2fb408e2a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
connect
InternetCrackUrlA
SHSetValueA
ObtainUserAgentString
IsWindow
CoTaskMemFree
VariantClear
ord30
??0Init@ios_base@std@@QAE@XZ
_purecall
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE