DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3da008e0464b42139baba4d08cfe2b27_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3da008e0464b42139baba4d08cfe2b27_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3da008e0464b42139baba4d08cfe2b27_JaffaCakes118
Size
409KB
MD5
3da008e0464b42139baba4d08cfe2b27
SHA1
adf4e097a45ad45cc96cb04555cc1ef9ae60c565
SHA256
bd5896267c063421d761614401b72da99f91e8b6934a4344da98db839b760f49
SHA512
c6f44d051f1da51e0d63b2e0ff32164d2e48549a58c7aec6afc3a509b099288c57a635e0716b7dc71e01023a43fc993b0ad0ed16b4206df7149bbb7b35d2413c
SSDEEP
6144:27LmrwXAdz4LwQr673G3Icg9+6Olz393nrgfsowtQdfPSQlp0bfLbVlT:27LBXAOJz3jg9U93pncfsobd3fWN
Checks for missing Authenticode signature.
resource |
---|
3da008e0464b42139baba4d08cfe2b27_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegCreateKeyA
ShellExecuteA
SysAllocStringByteLen
InternetOpenUrlA
inet_ntoa
UuidCreate
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE