DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
899315fca9d52cc53fe27ee06efacaad_JaffaCakes118.dll
Resource
win7-20240708-en
Target
899315fca9d52cc53fe27ee06efacaad_JaffaCakes118
Size
127KB
MD5
899315fca9d52cc53fe27ee06efacaad
SHA1
d2ea1914db00daeeef360b639d31a4863cf80d05
SHA256
36963c48f9bb661f0a6dcd47e29fb7a3c0e25671a055b6db3afdc7b1c48b544a
SHA512
165f4f3f61afc56b948da4aaf3951f35c559328db83d3bb452cf8b3bb15b49bcae0509de45b29d8adedf110d7670bd812d4038e9a8e5e5c8bb2a0c0e27cf71e6
SSDEEP
3072:5jOeOK7siSF18K60ZZoNg2a9EpnWr/pVEQ16jzDm2:5p7sHiK6HgIpWrHn1Om2
Checks for missing Authenticode signature.
resource |
---|
899315fca9d52cc53fe27ee06efacaad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE