DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3978801526c75e6086dc00cb1362ba94_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3978801526c75e6086dc00cb1362ba94_JaffaCakes118
Size
107KB
MD5
3978801526c75e6086dc00cb1362ba94
SHA1
ce3f13bcf18873cd07bd84b32ca82b4a74bc87ad
SHA256
0a83eebc7ecdf12063be82dcfba12fd69def8f7102ce55e8bbfea16bf9235586
SHA512
a31d39a8d55c8f4964f3d72a1237350cf72d0d81d60b758d8a0f1dfd1cca9827c5ef787ca7c8bec4faa286925258830dc39d0b2add292219a7450386ebbb7191
SSDEEP
1536:z95C125NM3lczlXJci0IB8puPushNe0BaWftolLMS5b5sFPQb9:z95eL3OzR+zIDZ/NawtXSsG
Checks for missing Authenticode signature.
resource |
---|
3978801526c75e6086dc00cb1362ba94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE