DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0a1e2ace8dd251b72dfd5b92c01bbd56_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a1e2ace8dd251b72dfd5b92c01bbd56_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a1e2ace8dd251b72dfd5b92c01bbd56_JaffaCakes118
Size
47KB
MD5
0a1e2ace8dd251b72dfd5b92c01bbd56
SHA1
1c100db6256f42e00d37f34fb2ee5d58ad8dba2c
SHA256
33f49d763e8a703d6e7d8eb3dd23a9c6e3e210cba325daafa80598a7c3b2f1f1
SHA512
b9991c4639396d469c9935abe4dec483606e00b48b27699d2ca8b40616008035a9044ebd7d22412b1224039efffb5b0cea0b63916d1f6e76062574c41203a0ae
SSDEEP
768:b72Jgw67KN73fwy9fSF9uiy8Szg6ElBjI+/Sagtscj3y1saSRdRu:b72O8cyBSF9ozg6EliYSaGsC3yaaSr
Checks for missing Authenticode signature.
resource |
---|
0a1e2ace8dd251b72dfd5b92c01bbd56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE