DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e2da572cbf3541a1cb7d9b7394d560f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e2da572cbf3541a1cb7d9b7394d560f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e2da572cbf3541a1cb7d9b7394d560f_JaffaCakes118
Size
63KB
MD5
3e2da572cbf3541a1cb7d9b7394d560f
SHA1
8938f85151f927906971bd4ac43cb1132f406cb4
SHA256
54dced52db90bb6a9faa19ded0a0fd2ed76b1556fd96562a89fee0c79eb756ce
SHA512
a3c42083c41272d76cd300d3733fc07e5bb9fcf3adb750f580b4d2ce3a8df6b627d73ed86bfe97201d99b67a06d6aac7c078792383fe83ef699699b11c8fa932
SSDEEP
1536:5FzEwi5bf3zVlobwXEWUQKvel3394W0h0mLSMqmoR3W0zC:5FIwi5bf3zrGwXEh7Qn94WtmLSM8bC
Checks for missing Authenticode signature.
resource |
---|
3e2da572cbf3541a1cb7d9b7394d560f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryInfoKeyA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE