DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
76235b93b90e9d68814eb3ab78646ebf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76235b93b90e9d68814eb3ab78646ebf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
76235b93b90e9d68814eb3ab78646ebf_JaffaCakes118
Size
130KB
MD5
76235b93b90e9d68814eb3ab78646ebf
SHA1
4f14e8f3100a1a9123a9af6f0643236cded7d28c
SHA256
cf549f44ad9a210647f0c2a6c56d79d8a26be3d957753e750785658b804d5ef3
SHA512
476a2d8e5291dff46b0c945e8e2ccdbeee41fff168019a178160202a96a34ad78525dba1cdf5fed2160d7b5b43e30a91fccfdca559084a9ebe3deb4611fc8f67
SSDEEP
3072:eRMpJ3LsdftmwfvT8DNRcp64giv+1TsoLro58c:eCL7sXdfvycpGr3vbc
Checks for missing Authenticode signature.
resource |
---|
76235b93b90e9d68814eb3ab78646ebf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoGetClassObject
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE