DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
681e5ba362d533aa4476b025eea0030d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
681e5ba362d533aa4476b025eea0030d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
681e5ba362d533aa4476b025eea0030d_JaffaCakes118
Size
140KB
MD5
681e5ba362d533aa4476b025eea0030d
SHA1
5002dbff1b6726e588563a0658d6ec5d537a67e4
SHA256
1edca48263ab283a19418e10afab5158553cc0f56a9380db8a9c257e23fd23ef
SHA512
61369e5eb0551548e8f97e7f75ef690f81145f428517a16775552bde1bfa6f4c39df5e023a946ce3def3b63115e34dcde3a0dd8d71d2f9a2c22e259d5787f63c
SSDEEP
3072:ILDh4KNqImlycYBrhMZY15wJD4BoRoEYibwh9YEq0t7Q6aXPV:IR4KNqp+X0Wjb9k+w9
Checks for missing Authenticode signature.
resource |
---|
681e5ba362d533aa4476b025eea0030d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE