DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28e9e537e0b30e4f5a7afa82658ae417_JaffaCakes118.dll
Resource
win7-20240705-en
Target
28e9e537e0b30e4f5a7afa82658ae417_JaffaCakes118
Size
87KB
MD5
28e9e537e0b30e4f5a7afa82658ae417
SHA1
228d970186d4aa9f73158b5311e03491413c9d9d
SHA256
58b0d170ccfc41dea199b70c3e7081caa258e703c0d6cf6519b7813c7f62b97b
SHA512
656ae2a15370c724284c3ac8ca589631901a3c1525e69bbdef7ec361ad467efd9b5d33786d54e22f6d7fd9054ce5289ce8d449622febdc36695d54b3c09f4451
SSDEEP
1536:kMZ+jk2KV/iiRaoCREZXi3EuzjAYNfxfDR7P6oqx27YX+YiMEzecOIs1Mrr:TZ+I2FiRvvy3ESAOtD7qMcXtcOIQ0r
Checks for missing Authenticode signature.
resource |
---|
28e9e537e0b30e4f5a7afa82658ae417_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE