DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6699e60fd2e77013a86fd2d418b592f6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6699e60fd2e77013a86fd2d418b592f6_JaffaCakes118
Size
51KB
MD5
6699e60fd2e77013a86fd2d418b592f6
SHA1
fba046648ce7e4b56a79512b0bce21e75e134bc1
SHA256
3b27b796efa5af3f854d4f916e528bc8aa1e1e2d9e3f8cdfebea645da554dd88
SHA512
bf4f1323ce70aaddeda0e240b4c7216c79952feff54b632b5f0b8354bc9626bab9a43d37d3ec2ca3f5c2a0419e7f53de8710aa9addbd217a91112998cfe5de26
SSDEEP
768:j95C128i7zQOSD3lczlYAy1bf/7WTciKxQpB8jl7otlYz+dkxFw:j95C125NM3lczlXJci0IBmGWw
Checks for missing Authenticode signature.
resource |
---|
6699e60fd2e77013a86fd2d418b592f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE