DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f473728ff49944ea879001663ca4fadc_JaffaCakes118.dll
Resource
win7-20240319-en
Target
f473728ff49944ea879001663ca4fadc_JaffaCakes118
Size
167KB
MD5
f473728ff49944ea879001663ca4fadc
SHA1
953c0325f71ca511b35850db3f5ea3f35787893d
SHA256
5bef24375c10a1a783d46b008b97356665f5c9ef6833c3ef86e77f30aefcbd80
SHA512
8959d8291e9f51b4e147a1d46fdbcbfeb60ebb32c48189fd2fb7b5dff0b9363502a3f0d4da2dfbb1da9a88c1395188e4fb715821cb980cfd5143845ffda0f5eb
SSDEEP
3072:cjPF8y32ANwUlFgXaj+SK7FwERUxSqdWNSQeuMEpcvfBxP6gA4B1bB98S2VHq:eN2uw2FW2+trMSqdfrVVP6gPB9wq
Checks for missing Authenticode signature.
resource |
---|
f473728ff49944ea879001663ca4fadc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE