DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
23667262f928978cb1d92e21b4541ed5_JaffaCakes118.dll
Resource
win7-20240611-en
Target
23667262f928978cb1d92e21b4541ed5_JaffaCakes118
Size
159KB
MD5
23667262f928978cb1d92e21b4541ed5
SHA1
c5eaec8a1708390b8e302c649ecdf0f37d3c2965
SHA256
29a35d0bd104be932254edd48c93d14b4541eb5e8da4c3e0649cb2d194abd39b
SHA512
aee2671c30fd088d3f20d84a7e7e0a30cec20e3875c0a8d57d2d76a9a100b42fc8f2f232641e35e55ba8da12f21984622ea64ee9555f5b5bf4d1b91599ab83a7
SSDEEP
3072:k3KOTId49nznGAh+5r861CjuGQTq1eS96mleWCc5CH:2Id4dfK861Cjuu1gmleWT5CH
Checks for missing Authenticode signature.
resource |
---|
23667262f928978cb1d92e21b4541ed5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE