DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
84b1da74dd561151bcc9d2639aeb6abe_JaffaCakes118.dll
Resource
win7-20240705-en
Target
84b1da74dd561151bcc9d2639aeb6abe_JaffaCakes118
Size
95KB
MD5
84b1da74dd561151bcc9d2639aeb6abe
SHA1
c2d2ed36618e6d44c58202b82c7fbbda571bfc36
SHA256
19710bfa4d3980dc0658b88481ea54da50e5ad1ccd947d6025bfb6438f6d6d04
SHA512
d1f36fe7f71769f400cc022e0854a6522054010dab877b8676af54fb68becb2b1a6834e14a4e2e01ac9ed8fe599a814a64bddfcf88251a1f04ec0067f9ef7cbc
SSDEEP
1536:cjPgAaJ5IB32sVN1mroRzFgFXd/H/0Q4wKbJJxn/JUvVBaWazn8Q0+ZF6bg6N8Lj:cjPF8y32ANwUlFgXf0NJJxnKw0Q7z6N2
Checks for missing Authenticode signature.
resource |
---|
84b1da74dd561151bcc9d2639aeb6abe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE