DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
87d8abc6a3bc3ccf851aba5311534502_JaffaCakes118.dll
Resource
win7-20240708-en
Target
87d8abc6a3bc3ccf851aba5311534502_JaffaCakes118
Size
99KB
MD5
87d8abc6a3bc3ccf851aba5311534502
SHA1
385162d9d76603be6bf1df671b6e4e5a6f4f08b5
SHA256
23b7dda91988e6d1d4d68918456c67974d352a91accefda7c8da37fe576b62ab
SHA512
fa85ea8fb39daf65c69a44d7c7479bc00dd9c3f8b8bd693effd05ae028853186e15b0480db85643c81208f558dff2cd475823c65060c033ebea3b75e8a3cb216
SSDEEP
1536:NyT5RkSmffbsWImNRbc3MOyfvnZ0qDwMOeUz7E2EfT99dYGlF6SQYyh:YfkfbDtfvnZ0cZUvMfLX6jh
Checks for missing Authenticode signature.
resource |
---|
87d8abc6a3bc3ccf851aba5311534502_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE