DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e29cb95a0a4de414711784622a11298b_JaffaCakes118.dll
Resource
win7-20240221-en
Target
e29cb95a0a4de414711784622a11298b_JaffaCakes118
Size
38KB
MD5
e29cb95a0a4de414711784622a11298b
SHA1
c24272a566250cbeccab4700c9cc6097c6fdf0ca
SHA256
7decc60271a956176e2ce005e157e5129c29bd08bc342f6a9cb25a1c6aeef0d9
SHA512
a68967eba96a9f678db232e26b38ebe5caa107df290d5a12a77ec9c0fa56b436195abe75fd7d12f8d097853ab09507de5d65239395f46b01d7ac9d9e63f700ff
SSDEEP
768:DkpS4vBb7xoW0s9Ndx99ZXyiyEBbBhRu823iq8McvH6:D0/vBb7XbN7BX4EDzR26f
Checks for missing Authenticode signature.
resource |
---|
e29cb95a0a4de414711784622a11298b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegQueryValueExA
SysAllocStringLen
ord22
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE