DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0a24a83a39a3a8f6e43493ff1d75e40c_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0a24a83a39a3a8f6e43493ff1d75e40c_JaffaCakes118
Size
51KB
MD5
0a24a83a39a3a8f6e43493ff1d75e40c
SHA1
476a979b35aad95b5b463d99a77ac82b3d12e59b
SHA256
429f6b8e4172aba9ee2ec8eaf3643427aec4366c648bff979ca3973cb001b9ae
SHA512
ccbb8a0b623c16ee3803c1002c2c33f5ac3528e8447ebb88827f4b73830fd9a069cbf94f44c602a082271f4fb77ebc13b786de75d6632a25abdfb89da486c57a
SSDEEP
1536:oQdsaG6KgETPZWqqMbzu9L3qNX2vB+68W:fCapxEbcqqnL3Mmp+s
Checks for missing Authenticode signature.
resource |
---|
0a24a83a39a3a8f6e43493ff1d75e40c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE