DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
69b23e1ce649ba0d3dd9ceeed77a3f67_JaffaCakes118.dll
Resource
win7-20240705-en
Target
69b23e1ce649ba0d3dd9ceeed77a3f67_JaffaCakes118
Size
135KB
MD5
69b23e1ce649ba0d3dd9ceeed77a3f67
SHA1
70be611bd65818573778cb919e05e8efb9a919ce
SHA256
0dfb890cdc7f5953696a7a7c56735e61004794e000a2bc98f1fb249b6ef9db35
SHA512
201cf72151c81c8bb1979dcc09a7461cb127eb5ddffa4d777f58d9f141a5dfe46e728987c107a6e46a542a514dfea6b28751f2cc6c1cbd06f27f719cffba2055
SSDEEP
3072:AmtIL8wHiLDugDVLPUgAgx+/Mvnt20PUiZDGoa:tOpHiLDTA1Mvngpi6
Checks for missing Authenticode signature.
resource |
---|
69b23e1ce649ba0d3dd9ceeed77a3f67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegEnumKeyExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE