DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0664c871eca5fe29a22b81e5be278b20_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0664c871eca5fe29a22b81e5be278b20_JaffaCakes118
Size
47KB
MD5
0664c871eca5fe29a22b81e5be278b20
SHA1
59518b092446067cc4a86e780bb650a01fb7f32b
SHA256
76f59a32a61bbe51353ff26aeab4f2269b562cbdf048e85190735d4e3bd4bc80
SHA512
9c5c065e759c2814430fb5f17165b1faf14b9c4f4c58413420835c4575f35a53618ae1b7e83ea7d9d62fe800d859932e4021f482dce415e228dcdbcedca5c76c
SSDEEP
768:F6qj9AiXntrYVQD+FpCu/Zl5kxAv6fg8lnbKt6TFNgtaFTuc3Jw8Vq55u:F6GAmnNAQDibnGTlnFNnScZ1wW
Checks for missing Authenticode signature.
resource |
---|
0664c871eca5fe29a22b81e5be278b20_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE