DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
03524762652e9d627924251e008f119e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03524762652e9d627924251e008f119e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03524762652e9d627924251e008f119e_JaffaCakes118
Size
17KB
MD5
03524762652e9d627924251e008f119e
SHA1
00e2ef131c39c39f53bbd985c4b222f109a14d9c
SHA256
e06b74344fbcabd46b165962e82e75d216b2d4d078b28f3596c522b149644941
SHA512
a1645ee8b341f5c3e671605adb1d685b77c1c589b7eb176a1ebba824d9d4b841279491d27f81177c8176881e3773d89c77bcdf728db6a54f3b6f1542ad8df8e2
SSDEEP
384:JAjJwnH9vBu9RdP5EZpWo+dxpTwQ9H2JDH5/yBMDAQk:JwJka5EvWo6xoJDZaB2AQ
Checks for missing Authenticode signature.
resource |
---|
03524762652e9d627924251e008f119e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InternetCrackUrlA
memcmp
SHGetValueA
URLDownloadToFileA
IsWindow
CoInitialize
SysStringLen
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE