DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2bf9133bea0abed4427669c3ce29598f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2bf9133bea0abed4427669c3ce29598f_JaffaCakes118
Size
151KB
MD5
2bf9133bea0abed4427669c3ce29598f
SHA1
0f2a0748d4c03f92edf7e34ce4742092e2e51d9f
SHA256
aa8639a8d9ec3c626a82ec12db0d2ae427bd628c78192148ddb36f294d74a5e8
SHA512
8a2b9f453a10d276c0fad84844a5e9e89bd4df1394507c9075fbd5f01b7145d59f2ccb218acf0dc74955656b4b98399bd63acae3987276c531f743555b4b0b62
SSDEEP
3072:k3KOTId49kihslUfJ/WfdQ+VKlllFk55O+OEHg5:2Id4Sihsif5WfdQ+VKlXG5d9g5
Checks for missing Authenticode signature.
resource |
---|
2bf9133bea0abed4427669c3ce29598f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE