DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
220a235565a7092937f8803c3510b586_JaffaCakes118.dll
Resource
win7-20240419-en
Target
220a235565a7092937f8803c3510b586_JaffaCakes118
Size
75KB
MD5
220a235565a7092937f8803c3510b586
SHA1
ea9ec1c86394642038d80bf83fc4524e19ff106f
SHA256
ecdbbe317c1290c38f60225b087a626ea87c22f854036a886e01889fb5c0236b
SHA512
4cc3cde1e502861894919221aebf555a3d18eae3ee17bb93715339a161256ec70ffb927830385926dbfeb5364d90cea45ad43a7b4393d977de63b2574125adb9
SSDEEP
1536:Zkmp6+kPw1bAdMudiCQTwVaYPzvihD0ik3dAvejICLz5eFY+VThE8NG:ymYhY1Rut9zvQD54AWsstu1A
Checks for missing Authenticode signature.
resource |
---|
220a235565a7092937f8803c3510b586_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE