DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d706777d22dc493f03b5c069f561f79a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d706777d22dc493f03b5c069f561f79a_JaffaCakes118
Size
66KB
MD5
d706777d22dc493f03b5c069f561f79a
SHA1
90cc2148bc8344e8bc3342f3796d47f8f87b8b15
SHA256
4cdbb364dd51162f005db4a1cb9c72c652f86dc6a77c9728826b2cfe9f3202e3
SHA512
851a7ff18064b80971856a7250031393a52ab5027e66831b41ddb17f65a622693be301aee5ce47afef059019b42d6832b52990cde4712c1827a418bdcd3e8376
SSDEEP
1536:XBjV+Pr0dekraSQlEytaFPrmn1xyJD21E/zKBu7h8Z6I6:a0dzrP6QFPs1pELKBim96
Checks for missing Authenticode signature.
resource |
---|
d706777d22dc493f03b5c069f561f79a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHDeleteValueA
gethostname
InternetOpenUrlA
DialogBoxParamA
CreateCompatibleDC
RegQueryValueExA
ShellExecuteA
OleInitialize
SafeArrayCreate
GdipGetImageEncodersSize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE