DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
64c72eeb170bd80a9cf2592788e95935_JaffaCakes118.dll
Resource
win7-20240708-en
Target
64c72eeb170bd80a9cf2592788e95935_JaffaCakes118
Size
127KB
MD5
64c72eeb170bd80a9cf2592788e95935
SHA1
d94b33c849262f0b8b5ff4d809c6f25406850582
SHA256
cbee074f17be61c233e36a368c2b6fff65bbf603ca63c626b7e0acb1f2f5562a
SHA512
2ffa38e4585568ff571bbfbef92655697e77cc651d2379bdc4cbe2b413ebcdc11cdb05856fb914452898061bf1d472d54d1a21638f294cfcb564431520a9542f
SSDEEP
3072:OvvV3LKK9kMq5UwFB6byVhdgUxYO8qz7E2GE263JxtdHt2XbBU:qGK9kMgU5bEhdKy3EVf63JKXbBU
Checks for missing Authenticode signature.
resource |
---|
64c72eeb170bd80a9cf2592788e95935_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE