DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4388aa40f356be8fd0c92589fb5d9e7a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
4388aa40f356be8fd0c92589fb5d9e7a_JaffaCakes118
Size
55KB
MD5
4388aa40f356be8fd0c92589fb5d9e7a
SHA1
c181d07995ef111a36ab50128329aa40675278f4
SHA256
763865daad92b9779761068c75aadb773d6f4ad8b1f490acbb9791b53a6332b9
SHA512
4b80e3489bdbb7e913002d7d0403c51b3ae46fb3a73b25afc0e8dd8a81d671df89f82233b32bf9236abcfb7cbe4d0ac520abada7b349ac0918dad975bc1d31e8
SSDEEP
768:kBIIXTQ2rsfLUkmSl+N8R0H/paf30u9Nce2WEumqvGieYs78scw0UxI:rIXsSszUtm+8R0HC0uHcnvudoz0yI
Checks for missing Authenticode signature.
resource |
---|
4388aa40f356be8fd0c92589fb5d9e7a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE