DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
40678bed5e03af2eb98b5e28548b53b5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
40678bed5e03af2eb98b5e28548b53b5_JaffaCakes118
Size
119KB
MD5
40678bed5e03af2eb98b5e28548b53b5
SHA1
68a8a00f279756cae1e78b8804917c016e245e48
SHA256
09279c59f66f4f4766b7010c67d66e87564122495b2017864bdb156c397be903
SHA512
6ffd3f6ef3e2b2fe48ecd2fb80d73fdd6355c409e643034b5ca92146b8956f33b2c145de90c64582af611dffa82d53f200d761dc23c64a71652611f8e65b8096
SSDEEP
3072:vFx1Mh5OvD//eUmUGomligOuFyQoYoIjYf:9x1q5qr3m/oCFEQHjYf
Checks for missing Authenticode signature.
resource |
---|
40678bed5e03af2eb98b5e28548b53b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE