DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
18d0e435340f78fab4ab037e85dc29d3_JaffaCakes118.dll
Resource
win7-20231129-en
Target
18d0e435340f78fab4ab037e85dc29d3_JaffaCakes118
Size
112KB
MD5
18d0e435340f78fab4ab037e85dc29d3
SHA1
3eccfb1ae3a15e052eca76c10b4ada3e7bcc4de6
SHA256
17d80625daceb2f7116865a63cfef28da4e6d3c7d1dc7ed322f7f1aba4d136b3
SHA512
20b9aebd576bf9f2644e3ae48b1c28fb44882289236294f02ceb1e79cd85f39fc91831d61ef6e42dc69d82406d2337c65745c21c034a8eaec28e6ad0d1cd173c
SSDEEP
3072:YXLHzn+/yetr70Oxs5p94Hg/6gokMWvt/XMZ:qa7H0ppWA/XokvO
Checks for missing Authenticode signature.
resource |
---|
18d0e435340f78fab4ab037e85dc29d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE