DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
82d1aba41e7b10a3770ec3edd5161e6a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
82d1aba41e7b10a3770ec3edd5161e6a_JaffaCakes118
Size
47KB
MD5
82d1aba41e7b10a3770ec3edd5161e6a
SHA1
a1480abaefe5f5139ffe6d4f4a7642d76c9f11ec
SHA256
1d0fd99d8e079e86605857ea3730fb4db708f87660a42092be0035b32fe426fc
SHA512
dac4cbc7827983a42ae2e88594064956a21b1346a30dc45d8ba3976e589e4bfae3b3934e155497218abbe70908be48c201d1945d6a09797e122b3c7a94fcd069
SSDEEP
768:DBIIXTQ2rsfLUkmSl+N8R0H/paf30u9NcePTc74eqQ0M9s:SIXsSszUtm+8R0HC0uHczo
Checks for missing Authenticode signature.
resource |
---|
82d1aba41e7b10a3770ec3edd5161e6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE