DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42be2cf19a3bc17ad878e23cc44a567a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
42be2cf19a3bc17ad878e23cc44a567a_JaffaCakes118
Size
55KB
MD5
42be2cf19a3bc17ad878e23cc44a567a
SHA1
d0fba4d48613641e7ef8647a4eca9ee820a73f03
SHA256
3c681dfbf86c504bd5a6b5d7a295ee4e02f6fa121a4cdcd6b72e6ab2ebec625d
SHA512
37e53edd9ec9b2bd67bde4af2440da19e5238fb43ec2714ff2defbde752253848145ebd15d14191748cfce15cc3cdb90dc08d8b4056fe4a5f1eacff1979946f1
SSDEEP
768:iqSpu49d35LWtI+6G3QCfJIK+2o5s93EXnzgdZV6Sd50WDmF3VJFLv0cI7YTgHxt:i7XJLE6KfOKdyXzgdZMaDmNV9dgrz
Checks for missing Authenticode signature.
resource |
---|
42be2cf19a3bc17ad878e23cc44a567a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE