DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3978e4183ed58e34c51ddb1f896b8e0a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3978e4183ed58e34c51ddb1f896b8e0a_JaffaCakes118
Size
55KB
MD5
3978e4183ed58e34c51ddb1f896b8e0a
SHA1
3b2dd253f17c4bc8731b94029736f2f0fe8bbb71
SHA256
04d339079e97f2b7e0488cb1acb16f8d621f4222332f60c1b9638d4c6f63e8f3
SHA512
46cb052bb2d8c89bb16d5c6f8b89f4edbd874a06a76ebf1b2fd522cd1b64345d63b58ff6f678768d61d10c94989b75e987b1cbff1fa313c15fe993777c3ab720
SSDEEP
1536:WaoY3yajhAQo+8Vg42sGOYgx5ifi5UXg/804:WaHyaroTgDsGts5Ltt4
Checks for missing Authenticode signature.
resource |
---|
3978e4183ed58e34c51ddb1f896b8e0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE