DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
770989e485bee7e692cdb3f9a2adc09d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
770989e485bee7e692cdb3f9a2adc09d_JaffaCakes118
Size
338KB
MD5
770989e485bee7e692cdb3f9a2adc09d
SHA1
7082015f8de42be787a77176e994be8240407934
SHA256
6d8603e50230f9296fd00c0e5f03776128af45c40c6443dbc64a4b4a8da3b213
SHA512
aaaa3e167a516686c47b31adc1961f3cf4f1781c904da15abdd121be3b6fccb57625b7172de5409f83c04cccd338f67ae7574118f0a2bead40504c396ae64819
SSDEEP
6144:4xwHJhcrmCBbe75jW1Yz20HkNdBwmnLV1XqDgJlgJQW2Ehs5vz0yk8PM3ErTeD:KEbqmCBi75PxMTZnLWgygze8PprT
Checks for missing Authenticode signature.
resource |
---|
770989e485bee7e692cdb3f9a2adc09d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE