DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
638669962caa34f159c992d49e5f306f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
638669962caa34f159c992d49e5f306f_JaffaCakes118
Size
99KB
MD5
638669962caa34f159c992d49e5f306f
SHA1
a2c881689954ad5a8f1564e56fd9174726d11759
SHA256
05ca989617c7ee610c25d38b379bfe4ef08b5ad6c1287b0123629f9c9a936c8b
SHA512
c95cb7a16c92d6b453aa0126418b42bf5deaf81d0127290a2303816f11805af5510c786181316680486d5f1259549df02488a845c9fc62a2045bafd22a05275e
SSDEEP
3072:gL39Y0QHKVgbHPUY986xw5iqCRZ8rJ3gG5/JbdsP:gb9YdKVMUY9XqCOh/JbdsP
Checks for missing Authenticode signature.
resource |
---|
638669962caa34f159c992d49e5f306f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE