DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
876d9788e8c1c93ba72197fff55f972e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
876d9788e8c1c93ba72197fff55f972e_JaffaCakes118
Size
47KB
MD5
876d9788e8c1c93ba72197fff55f972e
SHA1
4c8a8a65ef852cfc4d628616bb6e5dbeb98d6709
SHA256
491e3c90e10109ff7e6c6e15ffc33a7c1a474318a85e6b2064c927a504861d5b
SHA512
2512188cd45f3996f3dc3fb2105128aaa6ab04f6c744e3710a8ab019eaf1a72bbda01f266961d7c53bab103fe685eb8692e50c417e38de58d120985962091cb8
SSDEEP
768:+67OiENZCGE0MBYhVuOcO+zBnyruQFycGWaqAg/Z6a2XOpUDI5ElCm8ViuB21sD5:n7LVRBYSfByqQaqrxh2PxluiuYA
Checks for missing Authenticode signature.
resource |
---|
876d9788e8c1c93ba72197fff55f972e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE