DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a31088e749c2cfb50fa2ba51e1bf871_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5a31088e749c2cfb50fa2ba51e1bf871_JaffaCakes118
Size
135KB
MD5
5a31088e749c2cfb50fa2ba51e1bf871
SHA1
6cb3469f588bfb3e06dfef46fc4b88d45bba29d8
SHA256
3551391a23b48a3a1974fce22a9155e6afcdeaeae71f240b29cc3d306ad69e5e
SHA512
7a092a7eb83d248c1ab9b861541a532e033fc27e1f763985482c28a6453f117d4dc46d06a09540e64e4b3de054a41671bed7817a9165a71f8db221fdb3085a14
SSDEEP
3072:wuXcneVYhcbEQNpuAWtp3zYXZe14pxzeUPcTtV7dBg:wuhehAuhTWZe14pxzeicTtVRC
Checks for missing Authenticode signature.
resource |
---|
5a31088e749c2cfb50fa2ba51e1bf871_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE