DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0be999608ff45f046b6f87d5197d440f_JaffaCakes118.dll
Resource
win7-20231129-en
Target
0be999608ff45f046b6f87d5197d440f_JaffaCakes118
Size
182KB
MD5
0be999608ff45f046b6f87d5197d440f
SHA1
dafa23d97735e0ad79f9dfa8a740ac638fccf545
SHA256
b4dff972719f43361508fb338fdcdb605d5f2fc57e588d8aaffba85df6fcd951
SHA512
063f1ef67d0a6bf077994abcdf92c6c47c7956783de4fdb526e1f912bdfd0a59c5a0825151422d661aa736ed88a78d8b66a5c2e5f16b0150cf67ff1c62476e64
SSDEEP
3072:7SF5kUUInSxhurOPjaJ9Qdhomn9juFPMPD5VlOGc8U8aohWjcPCFyGx9mWUxqolF:G5SInwCOPjaOh7IFmsZ8Uho4VFy69pUR
Checks for missing Authenticode signature.
resource |
---|
0be999608ff45f046b6f87d5197d440f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE