DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0fde5164c3e709b5c5edeaaae75c91d7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fde5164c3e709b5c5edeaaae75c91d7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0fde5164c3e709b5c5edeaaae75c91d7_JaffaCakes118
Size
413KB
MD5
0fde5164c3e709b5c5edeaaae75c91d7
SHA1
b4e9e6da5a8f715b75dc3df5e891aa30de6093b5
SHA256
73ef54fbadee3819dbe89e6248f824a904f1c4e7439b2da4558e7d865f8c0c43
SHA512
fce23b7471bc8f8aca829d5d4beee7d3308e99225ddd9fc86413fb674d9f46d52ed810af06fa82726f2fead4cc52abe427c97074de2e5a4c4e733bf9cb34861d
SSDEEP
12288:5aEDuBlzbwVvtZnyx1IMdo4e3dhHmdh5PxW3JsiavXQ:IEMlzbKwk6+J6h5Pk3eiiXQ
Checks for missing Authenticode signature.
resource |
---|
0fde5164c3e709b5c5edeaaae75c91d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegSetValueExA
ShellExecuteA
SafeArrayUnaccessData
InternetOpenUrlA
inet_ntoa
UuidCreate
ord15
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE