DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
17b16636991d0af4d94f027d3bf3c1a2_JaffaCakes118.dll
Resource
win7-20240508-en
Target
17b16636991d0af4d94f027d3bf3c1a2_JaffaCakes118
Size
110KB
MD5
17b16636991d0af4d94f027d3bf3c1a2
SHA1
4054d922868dc5968224af197e39719ab39f09e9
SHA256
137b373c8350872129e567daa90db22d1159ba3b5da80ef38437ef3feeac943d
SHA512
72b9737a874d43878dba9afe24c5eafdd518ee53f156b74583364919577510df88fbe1687ba69657fb9649cd0bf6c67238bf543f61c919ceecb2ccb38da56da7
SSDEEP
3072:ceJ6sjMgPj0FVJo/wgNzKXfaz3DH0J1pQaL:ceJ6cMBFULNzKvaf0J1pQaL
Checks for missing Authenticode signature.
resource |
---|
17b16636991d0af4d94f027d3bf3c1a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.