DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15ff4c756ef47a0a7347978a9a3655bf_JaffaCakes118.dll
Resource
win7-20240220-en
Target
15ff4c756ef47a0a7347978a9a3655bf_JaffaCakes118
Size
155KB
MD5
15ff4c756ef47a0a7347978a9a3655bf
SHA1
ad2d293a6927fa1fcb05647ca5ecbba619548cfd
SHA256
58ea215959f6a01d42ab37ba8a5c701c840d46049a52533939c4e7f635a66f4a
SHA512
155933f9bb4084786af83d5d4180bb1fb13413378a47ce9a3cb024ff34cfc437cf4ff52d0fcc59aa08a75996dd44f8feccf62ca8a5c302255671da6cad08a68e
SSDEEP
3072:5jOeOK7siSF18K6E2ZVcMMxOyRYao4uyElpAm4SZ6aDUuSo1K+fD:5p7sHiK6tZVcMpaozxQW62PnK+fD
Checks for missing Authenticode signature.
resource |
---|
15ff4c756ef47a0a7347978a9a3655bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE