DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0b6cb78e4ddffd594843e60d15dc7702_JaffaCakes118.dll
Resource
win7-20240221-en
Target
0b6cb78e4ddffd594843e60d15dc7702_JaffaCakes118
Size
143KB
MD5
0b6cb78e4ddffd594843e60d15dc7702
SHA1
48283e31541b9c5d016334299c56e5b54ec21a0a
SHA256
2be3e7522300091566eb21ce00c0376643aa7dcb998aaf34cdd7832d5e0b8926
SHA512
acf9ae33c82b79c132f50b28ac5c5f71461220b464b7678a5588160e02bba0524e73c8814c635e1ac3162aab5ae369a832343557e90d96e4aeb69d3cfb5b2d38
SSDEEP
3072:7o0DN0aQBKdXZJpGVK+XTwWjLfZvzKlZnh/JbVzrO5r+/0s:7oK2aQAdXZD+XT3fZGlnwr+/0s
Checks for missing Authenticode signature.
resource |
---|
0b6cb78e4ddffd594843e60d15dc7702_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE