?RunAutoUpdate@@YAXXZ
?RunEditor@@YAXHPADW4RfObjectType@@@Z
?RunPassGen@@YAXHPAD@Z
?RunShellWindowsWatcher@@YAXPAD@Z
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eac824312154f51ea6e353e28c648815_JaffaCakes118.dll
Resource
win7-20240729-en
Target
eac824312154f51ea6e353e28c648815_JaffaCakes118
Size
1.6MB
MD5
eac824312154f51ea6e353e28c648815
SHA1
14ab674127193843c9bfb27dfa00b3c002ddec63
SHA256
4d704d8fc743a152a13ce4fc189ec47f99b1d678f1ae19fa6951181ca9bca6b7
SHA512
71599c90eb1f610c46ee85cb7f31f506ca479617ef08ecb0105a677e50bd9ce06030af80d7be8c1304d222d9fb2d5352c009946855f2e7706258851512d4def4
SSDEEP
49152:CqYX7TAdXhCxlFBUImPbW9YyCC2TCrCteUlq:LYMXhAl/mz9PC2Tjtev
Checks for missing Authenticode signature.
resource |
---|
eac824312154f51ea6e353e28c648815_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SetPropA
GetViewportExtEx
ClosePrinter
CryptHashData
SHBrowseForFolderA
InternetGetCookieA
ord8
CoRevokeClassObject
ord253
SysAllocStringLen
URLOpenBlockingStreamA
GetFileVersionInfoSizeA
UuidToStringA
?RunAutoUpdate@@YAXXZ
?RunEditor@@YAXHPADW4RfObjectType@@@Z
?RunPassGen@@YAXHPAD@Z
?RunShellWindowsWatcher@@YAXPAD@Z
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE