DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
84b6429eb8607522456bce8c50e76f9d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
84b6429eb8607522456bce8c50e76f9d_JaffaCakes118
Size
111KB
MD5
84b6429eb8607522456bce8c50e76f9d
SHA1
de6bbdb02ee2a62ab7871dd661e0aee56f2d6668
SHA256
0b01a114c598d9e958e7d28b827800845e2769464551c44a964daeb720880166
SHA512
a921c4b166d944a2574ccec101bf9fdc2496ab06e0b9cf8168c55acc654fee934feefd9e8cae12671de9f16ffe0c50bd8a3c9e66bba89a8ffc52ac9b29da428e
SSDEEP
3072:faHyaroTgDsGts5LEQvRGmqN1aoe4eF6CyXO:iyaegDsGS5Lp6PHmvEO
Checks for missing Authenticode signature.
resource |
---|
84b6429eb8607522456bce8c50e76f9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE