DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ad1bcb6d9fc5a2916bd23e2b12c4c90_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ad1bcb6d9fc5a2916bd23e2b12c4c90_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ad1bcb6d9fc5a2916bd23e2b12c4c90_JaffaCakes118
Size
107KB
MD5
5ad1bcb6d9fc5a2916bd23e2b12c4c90
SHA1
fabb85f432d7e92d159415d096240d4bf5eb85ec
SHA256
32ba5f8a15fe89a9fc7bd3ab6f4d68f170771b17dab9c8f3c15c594fd64f9880
SHA512
1fe7b2f831a307599594d6951e97d3d977803e712c26a20ece3a3c822820ce3cda5d753c3c123654b003082141673b35c87f350dbd1acd4a25e0c8ab894454bc
SSDEEP
3072:i+n5G0DyKCZzKy0yWWMciAPCTFwfjH4H5GXIvL:i+n5V/CZp0IBPOFcjH/4vL
Checks for missing Authenticode signature.
resource |
---|
5ad1bcb6d9fc5a2916bd23e2b12c4c90_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryInfoKeyA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE