DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
65d3c7a946676761f9b1860bc3ec4399_JaffaCakes118.dll
Resource
win7-20240704-en
Target
65d3c7a946676761f9b1860bc3ec4399_JaffaCakes118
Size
47KB
MD5
65d3c7a946676761f9b1860bc3ec4399
SHA1
904d97a52a40400e0b60c7eebcb9ea762950e367
SHA256
0664e8f88c4db8199bd30428c3e188ee2aa5d0f70dc862b983d601181c2a7328
SHA512
e714c0e8327a875eca8dc1e0291915817500dbda814c26becdc051b6ba4385b76f0aa4e103267df9eba6124893dceb9bbc05cebcb486ea9bc669863ba155d214
SSDEEP
768:wy8cKutl1V7GoGUnqnymO8MdSkgISl8iWrMgiegyFkM7mzwD2Iyz7tKuCqMj:wy8c/16DUqny1Fd79iEiH+mzw6Iyft1b
Checks for missing Authenticode signature.
resource |
---|
65d3c7a946676761f9b1860bc3ec4399_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE