DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0b781445cf6d4dfb4c20c13a7dc2ee3a_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0b781445cf6d4dfb4c20c13a7dc2ee3a_JaffaCakes118
Size
90KB
MD5
0b781445cf6d4dfb4c20c13a7dc2ee3a
SHA1
9d9d19a6d411ff13c16c424c3a887d0ecef3c379
SHA256
f7a29f177a8c8222ecb18cb43f0127b10050300bcf8581fcc97d2993d777bfc3
SHA512
9890d2fab71b656cc381f1f8dee70eb67491875b92a690f060605354cdde9e3da81cdc92835a683b604d19791b5b2dd7108a74c065c55e98649f19326c59a54a
SSDEEP
1536:ksHe9xfoxA07otEVqaXjHgNnObJFK/euxaqbM9oe1JYIUj/F3laLNNCK:kSCw7otEVJ5meyO9oe129j/FlaLND
Checks for missing Authenticode signature.
resource |
---|
0b781445cf6d4dfb4c20c13a7dc2ee3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE