DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e27483c24c62b31a87a2fe75817994c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3e27483c24c62b31a87a2fe75817994c_JaffaCakes118
Size
123KB
MD5
3e27483c24c62b31a87a2fe75817994c
SHA1
54bdb74699f18ba5014dadf39255354be8697ae4
SHA256
1e560c2fb49aa2ab33129c2144fdbf535ac18bc01fbd7223a45d3540e15ce0b4
SHA512
671856938e73942fad2f2558a561f6b2aa8605bfc1940cc2aadda43712595dad04e643de2a41ed50dcef5648a8379860e641da5d4e9f76a745b4cdb3ae3e7cdf
SSDEEP
3072:DIuZ86FbpPZngVM/74N/T9hovtT5CDibUF:UhCxngq741fsTgxF
Checks for missing Authenticode signature.
resource |
---|
3e27483c24c62b31a87a2fe75817994c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE