DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
84fcd9b3f35969597f3a9849adc26ab7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
84fcd9b3f35969597f3a9849adc26ab7_JaffaCakes118
Size
94KB
MD5
84fcd9b3f35969597f3a9849adc26ab7
SHA1
384d6bcddc1e91b98fcbcf99a28901a60df0fc54
SHA256
82a952c5ba816e7df64f8260079496f0f05b6646a679d4b931e0569997f1e568
SHA512
c7dcc9261bac44b4f3ac171a24e1ae34f3907fb0659de193e0d5321d5ce1ff8cab0ad8c2ab2bcb2c07fcff237a45a049236fe9e0cc25f22ce5161b7522ee4196
SSDEEP
1536:JI8CLbqlq/D1giQSQhJ9bRhopjY+UhJxQxbjc3Pu83Dhbk9d/tA7vkfnDY6tm7ae:JI8CXqlqr1giQ7hDIY+uJWxbaPZThm2P
Checks for missing Authenticode signature.
resource |
---|
84fcd9b3f35969597f3a9849adc26ab7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE