DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
351ab30885e469fec4ba67185bd0d6a5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
351ab30885e469fec4ba67185bd0d6a5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
351ab30885e469fec4ba67185bd0d6a5_JaffaCakes118
Size
52KB
MD5
351ab30885e469fec4ba67185bd0d6a5
SHA1
8e4f6dd0d0cb3c50d6c84f33af6ab041f47178aa
SHA256
c8635503ec43e476af7a8ebc515c865250094afb7592864e82f7e68d9728678f
SHA512
ad66a865f47ef453c97f80f80d88cff62072523c12c3f1aa68bd68d6df8bc96034ddeb527e37acce79e13071c34462c51051bc489b4a615466ff3a53bd6c4839
SSDEEP
768:5NIUoV/8BbiVGmr9JynE9b+5mbdXiAFpT0uPLMydiJyZloRj:TVoFVGs90E9bOIdXrnT0u7roR
Checks for missing Authenticode signature.
resource |
---|
351ab30885e469fec4ba67185bd0d6a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE