DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1894e4a1f8fdeda293e8e1efbfad09c7_JaffaCakes118.dll
Resource
win7-20240508-en
Target
1894e4a1f8fdeda293e8e1efbfad09c7_JaffaCakes118
Size
123KB
MD5
1894e4a1f8fdeda293e8e1efbfad09c7
SHA1
1cd07f239ee235c9092c7ba7a51fcc80b53adad6
SHA256
2916f49ce448bc1cc2e7c36adb9e32ab0aa7a2ecbe120917f9ceae4836549005
SHA512
1eda1efcd4112fff4dc4d964113e8fa1b9394adf32ec7356c76df80e74a34c592fc971fc5a25de2767f48e9ae060ba17fdaa648c88fe31f65c5424aa34c5378b
SSDEEP
3072:ymYhY1Rut9zvQD54I1eslXkECSR6EZbTJGeS2de:ghiROzvaj5lSSvbVRVI
Checks for missing Authenticode signature.
resource |
---|
1894e4a1f8fdeda293e8e1efbfad09c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE