DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6588c6bd44256676fd6e75f54cf5f0be_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6588c6bd44256676fd6e75f54cf5f0be_JaffaCakes118
Size
135KB
MD5
6588c6bd44256676fd6e75f54cf5f0be
SHA1
e88e9d254e384812776ae48316cce7df8b38194b
SHA256
4365ce807049cad601fd67e65cf1336fcc5a1fafad1ff6629457f0a352559da3
SHA512
0acecb66b1382dcac71e9c3556a02980b5583e868bd5ecd9e7503bf57091510a70ecc053d4e0d0360b2eddec35c63053803291610e4a9a832397660c1d60931f
SSDEEP
3072:XyYtmTMuHpP+OfDb6MB64WV9OJZSNeuzkYjlv8oLdHsaX:Xy82pGODrlWcZSNpwglv8M7
Checks for missing Authenticode signature.
resource |
---|
6588c6bd44256676fd6e75f54cf5f0be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE