DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
461dd445c1f7bb6a5c71299dc58ff076_JaffaCakes118.dll
Resource
win7-20240729-en
Target
461dd445c1f7bb6a5c71299dc58ff076_JaffaCakes118
Size
118KB
MD5
461dd445c1f7bb6a5c71299dc58ff076
SHA1
e9815cb4f9c58812428b9e0186ec1b228806038c
SHA256
26f60c7eea8ae17144dea9b2dd2ff268f03f9b1995dddb2df13490ee4969a811
SHA512
0c6806d29af6bae2ac8e98fcf4a0870f7c5a96c84790fa36b962494ed4a9d21c7db114769521f8800fdc3663d57e8d0d656385823c15b289cd848de0687bd034
SSDEEP
3072:vPJNtSE2Zwhjvtf9dVbEB1Hk5YjrxzrNJk6V5BA+:rtSE2ZcFxuHPjtI6V5BA+
Checks for missing Authenticode signature.
resource |
---|
461dd445c1f7bb6a5c71299dc58ff076_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RegQueryValueExA
StrRChrA
URLDownloadToCacheFileA
RpcStringFreeA
EnumThreadWindows
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE