DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
184ef3424ec42f5a44d5c45be31620e6_JaffaCakes118.dll
Resource
win7-20231129-en
Target
184ef3424ec42f5a44d5c45be31620e6_JaffaCakes118
Size
115KB
MD5
184ef3424ec42f5a44d5c45be31620e6
SHA1
df752aed6a2e4f32fe5bd95b1b420d0396e64b1b
SHA256
cbe8aea08f8bf3aeb6f4f60b1522e92ce10e07e02ef948abc190375a96e92cc4
SHA512
52c2ae06d47cb89e28a4318944b78635f73ce2445eec56b63b71904cd82456aba6f34d03fc0d8547498b035485c898ffb8126fbfb812383ce1ebb1fae9d55170
SSDEEP
3072:NFJyp31XujeTkPobZgzuJ+xqtakcZdp1Zu+jf:NFJar4QbmQ/wNj
Checks for missing Authenticode signature.
resource |
---|
184ef3424ec42f5a44d5c45be31620e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE