DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3895080a51d596308fb7a46670e41f2d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3895080a51d596308fb7a46670e41f2d_JaffaCakes118
Size
47KB
MD5
3895080a51d596308fb7a46670e41f2d
SHA1
49e58c16c8885c15d0eab34cbd70b1209f1b25a8
SHA256
55d560130f6d8bb97a73c9fd1dc42b48f770ed6bc6d19e69989c7f1e7a1eaa06
SHA512
5374d460c5d327166fa402f2d6b3156038b793b58f5d78670929bb5106fbe00273aae9b589eae72a98742b78cc57ca9f07059d39c504519bc78732dec99fadaf
SSDEEP
768:C6qj9AiXntrYVQD+FpCu/Zl5kxAv6fg8lnbKt6TFZskIQDvhrIyhb7jqXC:C6GAmnNAQDibnGTlnFiQzNXOy
Checks for missing Authenticode signature.
resource |
---|
3895080a51d596308fb7a46670e41f2d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE