DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
244777c241eacc85210d6248b82cdd26_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
244777c241eacc85210d6248b82cdd26_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
244777c241eacc85210d6248b82cdd26_JaffaCakes118
Size
162KB
MD5
244777c241eacc85210d6248b82cdd26
SHA1
81afbb1ffb92a6ac5f6746cd5ac1f3863bd51b8f
SHA256
93b7083f20d6791aac5583ffa073ca6797640a35f9f496ebafd0c5aa52609ac1
SHA512
886f72f6a62b932cf6fc3625ccc70c1161924ae8ce87d5163c86df139db8285d98f1dcf7651b954277dec0f9613be55954c0eeb2ed5d15cdd48ce713a4551c2e
SSDEEP
3072:5RMpJ3LsdftmwfvT1e+K+Ghc/WK3YEiiL9eejOf7GvE67/GqKNVGn1U1yT:5CL7sXdfvB/L/hVn9eO0+E6jHF9
Checks for missing Authenticode signature.
resource |
---|
244777c241eacc85210d6248b82cdd26_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoGetClassObject
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE