DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7379d2c833403d1f75f20cb10c5d3290_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7379d2c833403d1f75f20cb10c5d3290_JaffaCakes118
Size
155KB
MD5
7379d2c833403d1f75f20cb10c5d3290
SHA1
395c47dbf71a9c23c1469366d5179e8f575ac0e8
SHA256
e8f9537a85a127615bb3752648b8fde75a6eb82ae8a7f7fa42ef545462828cd1
SHA512
9b9f610ed143f40dd5d2d36fb0d1fa4975d673fa7fad8667b76bd6545b60fa08ff4a380c83317043e0f402aad7979c051e97e58a7b89bc2d255d7a49f5a08c4c
SSDEEP
3072:xzp82CdLeDYYg4xzudoEBoRm7hphjcjdNIj2jB6PQyayEYiwQFwJ9X:xzWh1eDYYgu2oCom7hphwj9l6F2DRq9X
Checks for missing Authenticode signature.
resource |
---|
7379d2c833403d1f75f20cb10c5d3290_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE