DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
75f4a397aa8c164799896d947f2e8309_JaffaCakes118.dll
Resource
win7-20240704-en
Target
75f4a397aa8c164799896d947f2e8309_JaffaCakes118
Size
178KB
MD5
75f4a397aa8c164799896d947f2e8309
SHA1
6543b9dbf3b4b08d3e0871f2186f8ebdb2a4e653
SHA256
797e5fb05be99cec5ab036b63b7e58adf7cebe6d4ac03c4acd55e81499f597ab
SHA512
564aa2651c890bc0f805406cce3acc9a601c4b0a3f1fac0e89d6f62f4e414f783dd3cfbc11581c538ae6ebe513eb1e5406cf5e8dfe529b40c1f3fa8ba803f17a
SSDEEP
3072:MI8CXqlqr1giQ7hDIY+uJWxbaP7RCR6AYLC3cMeVHKRNl5pnQSR2BphtU1YZafKC:T8CXqMaiE5+3KRCRLYW3hetKZ5pQSRgc
Checks for missing Authenticode signature.
resource |
---|
75f4a397aa8c164799896d947f2e8309_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE