DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
27abd06380c415bf6cdc251648e033d7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
27abd06380c415bf6cdc251648e033d7_JaffaCakes118
Size
87KB
MD5
27abd06380c415bf6cdc251648e033d7
SHA1
986e576e75d5267037f63eac19b58e26d7ae8417
SHA256
f565d9f3a4288340db64b0413e11558f8722e20a2d1ce7b932019737b6b0c377
SHA512
5c16990703f9f1b0165c62119cdfa7eb6cfd36b78b1d43e8cc1833b0984f2db939f0c515f585563947da9109fbcb71e6f7433bd022a8dacc9c496bcaa9d54cf6
SSDEEP
1536:n6QNg7RRo2a43LK103t/cMgBwG5UsNFB6Y6bORDQ/haU3pmbnExM9TXeMrh805gU:OvvV3LKK9kMq5UwFB6byVLgp5iBXv+5U
Checks for missing Authenticode signature.
resource |
---|
27abd06380c415bf6cdc251648e033d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE