DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
258447dc0ddb487d61224ec09296f01e_JaffaCakes118.dll
Resource
win7-20231129-en
Target
258447dc0ddb487d61224ec09296f01e_JaffaCakes118
Size
62KB
MD5
258447dc0ddb487d61224ec09296f01e
SHA1
d8b70cf51f79b5866aee5a7c4b1953bec65661b5
SHA256
30d34de4596d92e4ccc9f8fd4dbae6c3d16f93b2046f9429a1e279d4533826c6
SHA512
e2a313038d335ebdf78c88b4e404bde7e3f618ba4edbdbfb30541915df077e1cac48047997d4b6c68ddb9f81b2aea49bc640be332f2f886fd0f8ec84d4cdf008
SSDEEP
1536:isHe65wZCvUItayfkGe9ThkUFIDv3vmPjflgfR86X:iSF5kUUInSxhurOPjaJ5X
Checks for missing Authenticode signature.
resource |
---|
258447dc0ddb487d61224ec09296f01e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE