DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
660fb348c7ad095da9417b06787b43ea_JaffaCakes118.dll
Resource
win7-20240704-en
Target
660fb348c7ad095da9417b06787b43ea_JaffaCakes118
Size
83KB
MD5
660fb348c7ad095da9417b06787b43ea
SHA1
86ec3fb6f9e80bc0c9f4bf3f5fbfa0df348c3bc5
SHA256
2784ebb1fd3c3d8a4fc0e27dd5a3b87ddb764950312f893dceeb73a30ef6f40f
SHA512
7b51afee1003efc547b92a66a2cc4aafbe438d47be3b86d8d8e635db5f1b55c868dc02760a0b388df16e1478f415729141033a0601f7405968d4fd78515b74d8
SSDEEP
1536:e4AHIEaSX5Pb7igreRcdLiuRLGUs+JtplL3eBj3SO:e1Pa+bjreiNiuNA+JdL3el3SO
Checks for missing Authenticode signature.
resource |
---|
660fb348c7ad095da9417b06787b43ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE