DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08126d179727c83fd0bf5a06526870e8_JaffaCakes118.dll
Resource
win7-20240611-en
Target
08126d179727c83fd0bf5a06526870e8_JaffaCakes118
Size
159KB
MD5
08126d179727c83fd0bf5a06526870e8
SHA1
35d4b65f83decca5415d28742ec70d64e8d73827
SHA256
a841724d8ed311d6a30a06b38dc7e4652683883169f2b8980862b1b401c1ca48
SHA512
c3e8a3a359886bfe42079fa5465291e8abeaf8a494e2493a610279552d26564af55bdf63e9c59c42ec336c1e3ec1178341a7bdfeae8c21fd6f123d53c6b0878c
SSDEEP
3072:7Ut+S8aHJwbwut8XOvh/5FJn/5K2rUqr+D3XQbK4UT857HokKeeH:aFHwNdBYqrOPT86k3k
Checks for missing Authenticode signature.
resource |
---|
08126d179727c83fd0bf5a06526870e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE