DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
70196c97cb219697054a72bd08b34497_JaffaCakes118.dll
Resource
win7-20240708-en
Target
70196c97cb219697054a72bd08b34497_JaffaCakes118
Size
119KB
MD5
70196c97cb219697054a72bd08b34497
SHA1
64c5bfc7e857db87a839fcd28a366d883e7c293d
SHA256
9664808d17694acfbbcbc5301bfb82c59b8ac94995ea6e4e2133fa3876fd5666
SHA512
6af41f542a5a0adc570ddc77d95f5b2149cf20c940f6ffaaea54d0ea9c40e0c3fced7a5b1e43cc0f03fa852a2f1169a6b6bb6d9bb7b9247abdad868d9e03b6d3
SSDEEP
3072:DmkiplfCLyVz4iQYO/CHyc1CEelY1Ez7t0SobLW:DJipJBz4vYpSIpJ1E7CSYLW
Checks for missing Authenticode signature.
resource |
---|
70196c97cb219697054a72bd08b34497_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE