DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
07121322003bb91df78929eccf0c2d5a_JaffaCakes118.dll
Resource
win7-20231129-en
Target
07121322003bb91df78929eccf0c2d5a_JaffaCakes118
Size
90KB
MD5
07121322003bb91df78929eccf0c2d5a
SHA1
93a24c71f9fbdc17b54edaf41d5ec63c5148833e
SHA256
8d4539ff64d5d09224382efa2643e0b892e573103347f83c995b9012e5882f3e
SHA512
e5fe34233813de521e74c33cbac9f210ccaea07b3864c7502472a4cae3bd6c43191eefc2115137c215cbb1b83da87070b6f243a52fd51b594cdd267ac7427096
SSDEEP
1536:isHe65wZCvUItayfkGe9ThkUFIDv3vmPjflgfR86Xuw8iIuw7Lyxqv53zno5x2aJ:iSF5kUUInSxhurOPjaJ5XqiIu8e25zoZ
Checks for missing Authenticode signature.
resource |
---|
07121322003bb91df78929eccf0c2d5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE