DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
469eadacd97bfd2bbc1cf667c3124a99_JaffaCakes118.dll
Resource
win7-20240708-en
Target
469eadacd97bfd2bbc1cf667c3124a99_JaffaCakes118
Size
47KB
MD5
469eadacd97bfd2bbc1cf667c3124a99
SHA1
a38f8c94f8db7e4ce91b201967da572459735661
SHA256
14a67a801047631c718701bb07aad336383f9987d5769d3b576d17b0558a8103
SHA512
b097537514d1bfcce04fb31dd6db35a88c38bc1f51ea9ae34595cdca8932d783a906602f1b3b5a72067be13f4c1131bce67425d3d479fcf51f15ce89e210d1e1
SSDEEP
768:nlg+pEWYkYbRvDqOZVhw0T9GnjqPNQPrtO3Kjg7qD+vlL2J76hsOVa0V5vbyq:nhEW94eOZjw29UqPN4ruRqD+NL2J76hZ
Checks for missing Authenticode signature.
resource |
---|
469eadacd97bfd2bbc1cf667c3124a99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE