DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
76a875e238190056ef1cf3a25716f916_JaffaCakes118.dll
Resource
win7-20240705-en
Target
76a875e238190056ef1cf3a25716f916_JaffaCakes118
Size
164KB
MD5
76a875e238190056ef1cf3a25716f916
SHA1
507fa4ff491acab683761f66275304b5b8043265
SHA256
0327fd9598bc789180f7426963f2470a55a04931e409d3738c32329bd3811608
SHA512
16969b69dc9740c30a705a994b5eef21ad8d01783a6e1548d4660a4c25d4c51becfdf35c6189261a762f4254e562128a8793c3fd513e5c98df650cca0ebf77d4
SSDEEP
3072:K00BBMynlxZWdAPEHhpgycRSZB7q+SChkG9LO+c8xOei:K00jnlr+c4B73SChT9q+c8Q
Checks for missing Authenticode signature.
resource |
---|
76a875e238190056ef1cf3a25716f916_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE