DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4841ca7683882cb8d69575f9d9eeb08a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4841ca7683882cb8d69575f9d9eeb08a_JaffaCakes118
Size
32KB
MD5
4841ca7683882cb8d69575f9d9eeb08a
SHA1
4534798c39286df2e9050211557c348034f56b7a
SHA256
5175cdcdc2a836dc115e6a2f690db4f55dfe5be02b0938753985209e8ea2a083
SHA512
a392db19df1a293417b266ec40859778a475a6c76b274ddcd122cfdcebcf970a324d7ffd48716ee4f5e235ad67ace551616ba64e7c62ff076941237d90c2b215
SSDEEP
384:tfdLzSKKgI8sqEkGwyiFqrORAh/T1Ixkin:tlGcsG/0LT1Ixx
Checks for missing Authenticode signature.
resource |
---|
4841ca7683882cb8d69575f9d9eeb08a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemInfo
GetVersionExA
HeapCreate
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
DebugBreak
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
HeapFree
HeapAlloc
lstrlenW
SysAllocStringLen
VariantCopy
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
ord21
ord23
ord18
ord57
ord32
ord16
ord58
ord30
ord31
ord15
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ