DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
871afa9d34adc6097073a6beb02bc35e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
871afa9d34adc6097073a6beb02bc35e_JaffaCakes118
Size
155KB
MD5
871afa9d34adc6097073a6beb02bc35e
SHA1
0225c8881e4103983806a47ff29dd00521326da6
SHA256
9fe5d5565a825bae10a62b2716d0de1760d07a47922c75ff3a9c24f88681bab0
SHA512
e4f540dc7ae0f267336a0763bdd991f11236c1bc0905c86bba61f55002b004976817e3b8ff8565abc76b53205ac6be2e4f166e190efc81af3ed27c31bfb48edc
SSDEEP
3072:Zbgfcq7/XrBqMJFIAQaReEcwVJOA9N6OV6GWqXWFP7H7f9XCL2l:Zbgfc2XrtFIzaYDwVJV9N6OYGWsWFTHb
Checks for missing Authenticode signature.
resource |
---|
871afa9d34adc6097073a6beb02bc35e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE