DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ef88a7658d9fab245357eb4f744a17d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5ef88a7658d9fab245357eb4f744a17d_JaffaCakes118
Size
115KB
MD5
5ef88a7658d9fab245357eb4f744a17d
SHA1
2acd8031d7f40f0d7f2b9c54a73ef36ab270b404
SHA256
be4fa4fa5f129a6c9b888b065a8eea0d00bc2c031e6db7aa7f92c692e81a678e
SHA512
8fe246e93a283d6a754e11127db244bb9e21b6866e69543aeda9a434a324da8dff7962212107debf929ac936f9f8cc9d0c045359d3eac910ef1785ae810e9735
SSDEEP
3072:BiEOcC5VfqlV8gXJQbluUkO8Xvf+RYyh6:+x5VfiV8KKu4+f+Cy0
Checks for missing Authenticode signature.
resource |
---|
5ef88a7658d9fab245357eb4f744a17d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE