DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7905934892ed3bcfd9fe5508969222d9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7905934892ed3bcfd9fe5508969222d9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7905934892ed3bcfd9fe5508969222d9_JaffaCakes118
Size
99KB
MD5
7905934892ed3bcfd9fe5508969222d9
SHA1
452edb0c36c12a836675ce39c18eb588ae6af5dc
SHA256
e98581a5ca1df6cd2bc833c49658b83701673adc354c4f190b3882c2a903e862
SHA512
871831fbd283594a7ad3d352cb2421a044b8e9886e6fe3ed7080e6551bf93428d46c7282d472ea176054a238091160bc817ea9293e06f34410244a127b4da734
SSDEEP
3072:otsoPunkHN07DKt9PZ0CQ8L6P6pmjMO1IIoPm:otRFJt9PZAwGjXR
Checks for missing Authenticode signature.
resource |
---|
7905934892ed3bcfd9fe5508969222d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryInfoKeyA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE