DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2a66af0298731bf4260a4fc93e066428_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2a66af0298731bf4260a4fc93e066428_JaffaCakes118
Size
107KB
MD5
2a66af0298731bf4260a4fc93e066428
SHA1
018059ee9dbb331de213f4d1a9b28b6a23d588a0
SHA256
1c8ea0721edcea0c96a6a6a77c8dfbcdf221d1114514868ff2b3ea9f6106b30d
SHA512
b378db555bc62982fee808c1420693104bb1c86fd457a3eda19afba27199ad16b82a52cf21581703608e82ccf8f553de6fe230900d47c6e73206ab64210c80a2
SSDEEP
1536:caHhaaloeLQGePJZb0h570mHSlPdlCcBtA5ClpNzxgrFdnMeH9GtfEwXxrRxzhSn:aIoeLQGexZvwS5BtAQcrYeH9SBRR9cfv
Checks for missing Authenticode signature.
resource |
---|
2a66af0298731bf4260a4fc93e066428_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE