DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29ce443bedd209f4608383d4c074f095_JaffaCakes118.dll
Resource
win7-20240704-en
Target
29ce443bedd209f4608383d4c074f095_JaffaCakes118
Size
151KB
MD5
29ce443bedd209f4608383d4c074f095
SHA1
fe7587ce00a40f9f3266ed96176447e8ca83bdcc
SHA256
ab9d9b6c155e68e78f71795193092afad473c4e365f0d2b3671ff947bbbb7a0f
SHA512
c0883d919d47696cd33f193ffd771a53b70ab92786f482d44dacfcd84db89811636f27a05a7258fa507e541115f0b97c252bcba4d53e326650b1887f92f7aaca
SSDEEP
3072:ymYhY1Rut9zvQD54Z0e38J2NDLqEKjfBS363nivzOMyNFmh:ghiROzvaZe35NDLqEKLBS3BvGmh
Checks for missing Authenticode signature.
resource |
---|
29ce443bedd209f4608383d4c074f095_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE