DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3b96743e3151c508339eb1a70cece254_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3b96743e3151c508339eb1a70cece254_JaffaCakes118
Size
35KB
MD5
3b96743e3151c508339eb1a70cece254
SHA1
631987741a58a9f29172773526589df74e2d2791
SHA256
5e3a398fb6cca94732d61df455971ff689937564b3c66fecac544a61c3059fcb
SHA512
1caace540454e80e693e96187115bc84db24568480ceefd4e104ccfc347dd9abd857eb307751dd9f9326ddb1ca048a3f51d0ccfdd32330f0a854d05bbee901b6
SSDEEP
768:QPIddQ9IaLBd+uHbpwtvPzanYyFqn0aFYWVj:XddQ9INGwtTaY4qLVj
Checks for missing Authenticode signature.
resource |
---|
3b96743e3151c508339eb1a70cece254_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UpdateWindow
ShellExecuteA
VariantCopy
InternetReadFile
timeGetTime
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE