DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
462367e38583d043f10bc347305f2ca0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
462367e38583d043f10bc347305f2ca0_JaffaCakes118
Size
59KB
MD5
462367e38583d043f10bc347305f2ca0
SHA1
61c5ff9121ddc457239d4da10c481a3c6cfa9b23
SHA256
1783f3ecba57f4983b2d5a54d0995a543dab9e00c58b93635bbd541e467b70ba
SHA512
f38477c4c2bae8bf3dd46e29a64664e066ff8f2ff8d2c713eb17a1b8cb8c3e418fa2bd87d5e21b1a22232155cf5d0011bb912d97182319d12b61d8087beb483f
SSDEEP
768:8S+a/u6ha8Fl5KS9fJhlUn2rjeKRtiO12KpQcg51/q7dDyy7mqiz83taTD6k24iJ:caHhaaloeLQGePJZb0h57DUHX2w8Bj
Checks for missing Authenticode signature.
resource |
---|
462367e38583d043f10bc347305f2ca0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE