DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dc47ab317de2b618695cf774f1d32925_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc47ab317de2b618695cf774f1d32925_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc47ab317de2b618695cf774f1d32925_JaffaCakes118
Size
94KB
MD5
dc47ab317de2b618695cf774f1d32925
SHA1
d91763128e8519cc5ae3916e44f048160bac44dd
SHA256
1a569fa08a8b8aa94ea3015a99c4c101d0adee2fea2de3efffb3d1daac91202e
SHA512
c5d77e3012286e3c8a8388ea3fe1a5c67e42e322d31ac8f180d4c6c09a9a8f31af0e449506af85524cd8273b946691f085620ab4f37d7076619dd0a8e00219bd
SSDEEP
1536:PLwpx/yiRXt42ya2383NRYithqMKWAYUJyshxNQjFXzEHXlidTeJjG2lEFy5+817:PLwpZyyXt42038TxtCYUlhxsXz2X0dU/
Checks for missing Authenticode signature.
resource |
---|
dc47ab317de2b618695cf774f1d32925_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
CoTaskMemFree
ShellExecuteA
InternetOpenUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE