DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
83940daf7c7d1b0415ead0530d519b39_JaffaCakes118.dll
Resource
win7-20240705-en
Target
83940daf7c7d1b0415ead0530d519b39_JaffaCakes118
Size
107KB
MD5
83940daf7c7d1b0415ead0530d519b39
SHA1
c63320c1b2347bb996ce2af670865b4b43b5809a
SHA256
040dc8199286efa01374fa96448c664a4a76f02c103fe1eb5e667d0b3bf8ac58
SHA512
475877ecfda04adc9f619580340d33f9deef9060516122a19a501ed6b05d8d2610cccc6742e123698eaea620eff5cb41089a72693f242d0af06b67da99296f34
SSDEEP
3072:7o0DN0aQBKdXS7OawjTkeDB+Z2zJI+rRo:7oK2aQAdXS7Oaop1EMIAq
Checks for missing Authenticode signature.
resource |
---|
83940daf7c7d1b0415ead0530d519b39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE