DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
16dbd5067046d265a13e7f2f31ce1429_JaffaCakes118.dll
Resource
win7-20240611-en
Target
16dbd5067046d265a13e7f2f31ce1429_JaffaCakes118
Size
119KB
MD5
16dbd5067046d265a13e7f2f31ce1429
SHA1
b2aa5884efe341d5d6942e9e5cf87358af866511
SHA256
2bf794ec3322ed755718e7bdda48297ef3e51ce51248e1c98f6ca61918c5a628
SHA512
b34df1ae6cc1f5b1885194d7fba3761c8ead7408042500f6e76d29aa47aaaf7ec6b4e66b5bb7b79534e3c2c5827fdafb30cfd8351d7d1d219db6fa7aa7407184
SSDEEP
3072:xALfz9gH71/0E7XQMasUSIv9UEOWOXIbI7:xK9p8aBSIv9U0bI7
Checks for missing Authenticode signature.
resource |
---|
16dbd5067046d265a13e7f2f31ce1429_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE