DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
291904710091db80f7ceaf231eae87e5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
291904710091db80f7ceaf231eae87e5_JaffaCakes118
Size
476KB
MD5
291904710091db80f7ceaf231eae87e5
SHA1
023330a39d7b9da6968f11fdd983c08b4d24fc80
SHA256
b4a14422031301b15861b2f220e1d4fe02784b412ec74a1a519a91cf8d15cfb6
SHA512
7b78ccca2fde4fad2e9bc076f163df2c2226fad21f38277f18c4c23477a788118a65783b6c763d039f2ffcb89a3e526c0e3c55f125972bae3c9aca6898074b68
SSDEEP
6144:53/KM/ENbWN4Oi9cmHLf5M9dvaYdZeOTB6ny9SEpujHjZ0JB129b2Tr5sevN2m0E:53SBaqBWmHF49veO96nLeJm1KdFYmt
Checks for missing Authenticode signature.
resource |
---|
291904710091db80f7ceaf231eae87e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ