DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08ae133a09aca7b7a11a20929385e352_JaffaCakes118.dll
Resource
win7-20240611-en
Target
08ae133a09aca7b7a11a20929385e352_JaffaCakes118
Size
174KB
MD5
08ae133a09aca7b7a11a20929385e352
SHA1
cbd335cc10eb9c0555b383f2d1c2a92be95d988a
SHA256
40561fe4048225991f65afbe8e23a0ac916a23a202d2fc008e7ca684b31d436c
SHA512
c506261eb9f168c957554cda31189957d69da273c6bb4e7940412c8b49fcd6a5bc8ee44603d4588e98b0b3a65184eba8dc9c5190aabfe61a371c7b0723b77e84
SSDEEP
3072:USF5kUUInSxhurOPjaJ98tYWdFFd6TrO7wEo1L4PsYFB6mX:D5SInwCOPjaaLdkCa4EYv6mX
Checks for missing Authenticode signature.
resource |
---|
08ae133a09aca7b7a11a20929385e352_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE