DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
685b203ed3ba82949951feb581a21211_JaffaCakes118.dll
Resource
win7-20240704-en
Target
685b203ed3ba82949951feb581a21211_JaffaCakes118
Size
99KB
MD5
685b203ed3ba82949951feb581a21211
SHA1
b780575e640e81360838d501507991c3d11f3073
SHA256
b1fbf4a870040618e6292e90d821def3d7b5b086d8481ec2825c7f61695030e1
SHA512
e68086daad9f6edc8238be302d5c42fcca1e1cce54b2ecd7973e10fa99e6755b406af1f059c684f99c3f104b74980a2d76249a732a750517c201a31f231448cb
SSDEEP
1536:z95C125NM3lczlXJci0IB6iRTgzsgsSR1cp9Kq6g6iQFnIuqLy9EY:z95eL3OzR+zIISkVsycKlg9QFyLy9J
Checks for missing Authenticode signature.
resource |
---|
685b203ed3ba82949951feb581a21211_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE