DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0bb1ed38382382dae06f271c63584067_JaffaCakes118.dll
Resource
win7-20240221-en
Target
0bb1ed38382382dae06f271c63584067_JaffaCakes118
Size
122KB
MD5
0bb1ed38382382dae06f271c63584067
SHA1
b0a13a2606bc1b85999aa29e45a04a2dac0c6938
SHA256
98a43270f110317e8a253d621cb7be049f08b0568b3aec5c7a8260c06e6843da
SHA512
2e23ddfadd3d0f0bd5d482d4e5520540f53f073075139442bddce015c92858d265e41d992f69e75e8b9d2e9a181104a61c33ad494f51142397047498094b39b3
SSDEEP
3072:iSF5kUUInSxhurOPjaJ5Xukp007fIv4RZNa4PhwlVon:N5SInwCOPjaJPfIp4K+
Checks for missing Authenticode signature.
resource |
---|
0bb1ed38382382dae06f271c63584067_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE