DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
155949aba54a9afe2922da29c007bb09_JaffaCakes118.dll
Resource
win7-20240611-en
Target
155949aba54a9afe2922da29c007bb09_JaffaCakes118
Size
139KB
MD5
155949aba54a9afe2922da29c007bb09
SHA1
11416f1e64a8125f08fde68b8e503994a83eba8b
SHA256
d81547a01c164d82bc4ac6acdb50ca6dbec3f480d7bdc051d18fe39f46e184cc
SHA512
0248a3c8b5b3806d993680828b01c8a2d5e852468e810bca44fbee6233ac94341389ff5820d67f55186b121646718098783f561f1e14e5134714e32cc30aad59
SSDEEP
3072:ymYhY1Rut9zvQD54o1pyzh8UWgKaCD4tDYWiqnTZjoOV:ghiROzva/1pSh8dL14KWdVcOV
Checks for missing Authenticode signature.
resource |
---|
155949aba54a9afe2922da29c007bb09_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE