DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6ee3f767a2c1774a54ec1667d99d54b4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6ee3f767a2c1774a54ec1667d99d54b4_JaffaCakes118
Size
168KB
MD5
6ee3f767a2c1774a54ec1667d99d54b4
SHA1
8fb3b95db42b648059294c784be272550af92114
SHA256
11448d274af4be2f35533593aa48cbb27c8341e13b03f03ea01c3c4da8f96061
SHA512
f166323c7e543e67138b0917617daeb51609527628f26ebe1a3aea2a4a344439534cd4298c15896b5d3dc136308696affeebd8dc2f696d033cdd969433e06918
SSDEEP
3072:K00BBMynlxZWdAPEaLznMHSCDJKQ5bYMsIOdJsNV+TVR2p3iACpkvSmBKoTnKxY:K00jnlrETJJ5vHO8rdiA3SmUCK+
Checks for missing Authenticode signature.
resource |
---|
6ee3f767a2c1774a54ec1667d99d54b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE