DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
664ee8b8b92310d8850cf218f795bdea_JaffaCakes118.dll
Resource
win7-20240705-en
Target
664ee8b8b92310d8850cf218f795bdea_JaffaCakes118
Size
143KB
MD5
664ee8b8b92310d8850cf218f795bdea
SHA1
4a4a0559020857d0572b79c610a23918547fefef
SHA256
6eafa122e4a8d5691286f5d967c067ce7a3fefcbd6744e408eebc75423a0f317
SHA512
e8f45662e0787c283967ed89fd46a54246d42a73f5e31b01b089b8b149f2a6dc7d95ace80a1971de10501493a95609c0d9daeb9550a8063a4e4d071fd052067d
SSDEEP
3072:IOjHy71AWXnAdXAUCvfd7zB8I9Ph58iTqvqrS97bvp:DjHy71AWXnAdwP7zTh58iuZp
Checks for missing Authenticode signature.
resource |
---|
664ee8b8b92310d8850cf218f795bdea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE