DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ffe89850862ffb6b866184ddf1ff5d2_JaffaCakes118.dll
Resource
win7-20240419-en
Target
0ffe89850862ffb6b866184ddf1ff5d2_JaffaCakes118
Size
163KB
MD5
0ffe89850862ffb6b866184ddf1ff5d2
SHA1
0df01ae1dc0231786ec5026a06d0cfd7ee1f14a7
SHA256
eb98a165f48012961340204e52a56f42fa9fe033778ea04c6c9549372e5220eb
SHA512
f2289ae80d62d9eb7b60facee3b583cfe8527f5a54151a8fe724fdfc14ea87412b81504f37769e78125eafa27963fc9edd82c781050cd5cb184ec4a503848ea6
SSDEEP
3072:7iEOcC5vxag1a4Z8aU/zx22gfvB+emHRJX9WoRRQlweYzaaRRJL:gx5vwgQ41UJgR4xFLRWCzVt
Checks for missing Authenticode signature.
resource |
---|
0ffe89850862ffb6b866184ddf1ff5d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE