DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
748e666a9efd284d17aaae252f0b394a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
748e666a9efd284d17aaae252f0b394a_JaffaCakes118
Size
107KB
MD5
748e666a9efd284d17aaae252f0b394a
SHA1
2cdac64c0f06db770648e286e4a07c3f2a36d2ac
SHA256
03a440264c942459323bc68e1882b3407d5610fcac30a1a1bbbf7ac4f75b372f
SHA512
1030dc2861ed9a42fd0942e5ccf86ad1a357bd4a5c0174885e5b19c21fda18215b2d808baa63a1f2648f7792db2d4c4bd7a952e5797c6de7e481a0edb9abcc7d
SSDEEP
3072:akuM6JxU6KZBiHW3vfayScBzb9f+GqL7M5ocm:ak90zKniHqvfa5cdR+GM7cm
Checks for missing Authenticode signature.
resource |
---|
748e666a9efd284d17aaae252f0b394a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE