DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e74d9a52fe1d2da268914b478023e8f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e74d9a52fe1d2da268914b478023e8f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0e74d9a52fe1d2da268914b478023e8f_JaffaCakes118
Size
39KB
MD5
0e74d9a52fe1d2da268914b478023e8f
SHA1
ae1f531e60a99f736c44fdf2fb9e80fff7cca74e
SHA256
dde681df2b4bed2a9f90b7977e00398db8cac9797a69d7d7f8fa9373cbb977af
SHA512
6d3df24248c6901d6984bd562d2f3385487fbfb558e9fcb02f5095b5b0909795050aaf7db570ef410b98a45f2698748719a49032bbc5a6a95c515442d34257fa
SSDEEP
768:6PfxRh8MGDPXs/HJxXpvBqJpUzNUriiYha+dMhUB1isS:kpRuPYHJnBqDUzAiD0zU+F
Checks for missing Authenticode signature.
resource |
---|
0e74d9a52fe1d2da268914b478023e8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
memcpy
FillRect
RestoreDC
RegOpenKeyExA
ShellExecuteA
CoTaskMemFree
VariantInit
inet_addr
InternetCrackUrlA
SHDeleteKeyA
RegisterBindStatusCallback
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE