DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6a346404e1342a7b76db81f91ef2d1fe_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6a346404e1342a7b76db81f91ef2d1fe_JaffaCakes118
Size
59KB
MD5
6a346404e1342a7b76db81f91ef2d1fe
SHA1
1d3ec025bdd1a1da4c5e1b66b94327cd11291459
SHA256
934fa2f2a46eda2331fd5f1bb59d84daa50ad9af8f79ac0b5133da75826abbb8
SHA512
86b477a80e70267f0bebcff2f46481e16da1bf50510e5b293bbf1f7016c9259898a9446ccadca083e23b0db32c3cbcabcc6de70a8144354419c59479de94da55
SSDEEP
1536:8fJ7IwK7p3D6Egv/phBMBO8gz9O2UGU0EKUv6:8B70lBMphBMD2UqpUS
Checks for missing Authenticode signature.
resource |
---|
6a346404e1342a7b76db81f91ef2d1fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE