DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f84f7123b5b1ef2284a898da7090f6cc_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f84f7123b5b1ef2284a898da7090f6cc_JaffaCakes118
Size
67KB
MD5
f84f7123b5b1ef2284a898da7090f6cc
SHA1
f52a4ba82fb6e2445a31fb6bd6655666ad320bcd
SHA256
dd4076723766439bbd2a91af4d6b8f93c6a9aadb812fd05bfd774a3a85afa019
SHA512
4a8319cc60cff5e9ae5bc88cf33006f72142141cb3b8f34845c376a1214c35c6d21c5aa19eb5378c556c5005cd5abca992d381890e7361d6e66a8215e08a26d2
SSDEEP
768:8S+a/u6ha8Fl5KS9fJhlUn2rjeKRtiO12KpQcg51/q7dDyy7mqxKrerBEqzR75YP:caHhaaloeLQGePJZb0h57FBPdYwIXQ0
Checks for missing Authenticode signature.
resource |
---|
f84f7123b5b1ef2284a898da7090f6cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE