DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ff9dc43eb134f0024f296b0f072d6fa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ff9dc43eb134f0024f296b0f072d6fa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0ff9dc43eb134f0024f296b0f072d6fa_JaffaCakes118
Size
411KB
MD5
0ff9dc43eb134f0024f296b0f072d6fa
SHA1
27b2615b60c2b0857d362bd716d92311fa1529b8
SHA256
7f237c41724cbcd6667e22b5f61a9a8010f7c8d82b36719a59136a4180d2d897
SHA512
205bae44f0cb3e277474f8ac921f7ed0d7f3f4e571955c18f2c7d5f70f361bcbbe6648ad14dd83489693fb0932123b7bd389e2ecef3d3b883449219cc5686467
SSDEEP
6144:TxPDLH1ErpFYB7ayBJIxLxHSUzwl1HQxcl8Vuy5gP1tO4PbQ6fiq2:lPn1n7PwNoNQTVxgrO4Eq
Checks for missing Authenticode signature.
resource |
---|
0ff9dc43eb134f0024f296b0f072d6fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
RegCreateKeyA
ShellExecuteA
SysAllocStringByteLen
InternetOpenUrlA
inet_ntoa
UuidCreate
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE