DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e7dbfa4bb72a11979b0592bb5e5f287_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3e7dbfa4bb72a11979b0592bb5e5f287_JaffaCakes118
Size
121KB
MD5
3e7dbfa4bb72a11979b0592bb5e5f287
SHA1
d17fbc04df4fc29e01fe58435322b27e37751bf8
SHA256
69d11653a3d6c278dc2221186bb36de74a0f9c15ceba20c3a170188f76c1c8ae
SHA512
21d73c619f787608eea189ef6db152e778ce705550f9ea2d23fea04a99506c8547cc85f0322a9716937004f41d5f0e66276e8e22074a4eaf3775f4cdf88068b5
SSDEEP
3072:ro99wih5lLoxlVJ/kEQvbN9ZBl5ee7Wmpu8F62Dzxgvb:sn/NkXVJ/C59ZZeebJ93xgz
Checks for missing Authenticode signature.
resource |
---|
3e7dbfa4bb72a11979b0592bb5e5f287_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE