DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28d4e79d96534a26e0f16f944b403b7d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28d4e79d96534a26e0f16f944b403b7d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
28d4e79d96534a26e0f16f944b403b7d_JaffaCakes118
Size
19KB
MD5
28d4e79d96534a26e0f16f944b403b7d
SHA1
f740ade02c634f8d073a65bea42c7f4d6fa90e39
SHA256
21b463a49fa6208706fe599d08818bf42b02cf24aa6b81cc108d982f46a79199
SHA512
ba959860259eaae63e06982b71320cfde7447300f85e0a89b7a3e7bb1db7b7f0491ee4a6f1f1f59910b991af49dcd5e862a466347fb8d754f9bf979cbe42078e
SSDEEP
384:8zgnGe0mtMWXTcP/77nFQVYGAVaHHWbEKELhC:h+moHn6Y/yWbElLI
Checks for missing Authenticode signature.
resource |
---|
28d4e79d96534a26e0f16f944b403b7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UuidToStringA
recv
InternetCrackUrlA
strchr
SHGetValueA
ObtainUserAgentString
wvsprintfA
CoInitialize
SysAllocStringLen
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE