DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
449dc50fb02856d0594703915e2f064c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
449dc50fb02856d0594703915e2f064c_JaffaCakes118
Size
88KB
MD5
449dc50fb02856d0594703915e2f064c
SHA1
f67fdd09f1bac1422b66d1b2edb938b85acdd341
SHA256
089fc0a31ec5d1aa35cd3e17c78383b608d5c4511bffe4200606c1bcb1454bd7
SHA512
c238a9971008580b6caac05f443f0194a253846adcc092ae067815243dc3fe7a5e37963d8a92151aa175dbcdc4892e23b5a99650efb13d1caa92a49622e399be
SSDEEP
1536:zLYXLHz+e+nQcbtyl24ifci9pxJn0z4rz/lsa0wBIt1zyxOWeAapAc:YXLHzn+/yetr70OxsDwBIfyxZc
Checks for missing Authenticode signature.
resource |
---|
449dc50fb02856d0594703915e2f064c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE