DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
079014a47a6a50d1a16b695067a54209_JaffaCakes118.dll
Resource
win7-20240903-en
Target
079014a47a6a50d1a16b695067a54209_JaffaCakes118
Size
9KB
MD5
079014a47a6a50d1a16b695067a54209
SHA1
224878b3bad164bc1a9ce09727e22a75e420e169
SHA256
c0faf9effda992966ba2a5a12c1c217eabe4a0154c2774603ebd184fc1c21612
SHA512
158c92543cc3cccf0af2d100ebf8bcc65776532eeba83cff9c722502bf23feb43deba472585e1d70cc27bcf3a797f477b2097e27f1408863b4abc4a30e19bc70
SSDEEP
96:L0xJBk7H4z/ivHtH3XwBJekb9tKzUA5tv0FaBakgpuTJlgj/TaR8B:LcJBYHc6ZwTekbzKQA5tvMaLgANloWS
Checks for missing Authenticode signature.
resource |
---|
079014a47a6a50d1a16b695067a54209_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
RegQueryValueExA
InternetGetConnectedState
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE