DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
01c42ed8bc46cfeede02e707ea61e38a_JaffaCakes118.dll
Resource
win7-20240508-en
Target
01c42ed8bc46cfeede02e707ea61e38a_JaffaCakes118
Size
115KB
MD5
01c42ed8bc46cfeede02e707ea61e38a
SHA1
0307dc9ff49bbb1246bd58d8056bdf6138d3a9ba
SHA256
28a713ec0263703cd532c16946f37458839ba209e51f7d3ea6d7ab628b44aa6b
SHA512
d47625fb685035273175fb486622ddd170ef3edc998a88e823b02a7058f47778fa13f01b8ae2dc379617ca570b931c28663dc53e257b7e3853c3bd855899d86e
SSDEEP
1536:EH/Kef2E1NbDNe5aQNJCX00ttJwowCYVXBIe2zC/0XXCRzjfj5lQB7njeh:8/NbDDNbbdmXics+jc7jW
Checks for missing Authenticode signature.
resource |
---|
01c42ed8bc46cfeede02e707ea61e38a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE