DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2549beab378488bcbddf209db1857096_JaffaCakes118.dll
Resource
win7-20240508-en
Target
2549beab378488bcbddf209db1857096_JaffaCakes118
Size
135KB
MD5
2549beab378488bcbddf209db1857096
SHA1
1ee1168b27676f8939eac9388887d9ce002ddae3
SHA256
0b38fa7cfbacf8ca89ef0f540c0a15c9680701e3054ee6deb3faaaeff2f6b725
SHA512
f910cf7f776a491adfddbddcfc3d0505a555412ef5f0bc86207f9d2c23741e077127d97b939ffa134e79c2fc42523776d5e695e264e09c629acbb0f22d78ed53
SSDEEP
3072:1JOZjmqPN4EVNLc7CvcuIBfeu+7j0cc3eReVhsefwH:1JqSOzvcuIBmul3eqhFwH
Checks for missing Authenticode signature.
resource |
---|
2549beab378488bcbddf209db1857096_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE