DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8a8f227353999a4581dad5515f4f89fa_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8a8f227353999a4581dad5515f4f89fa_JaffaCakes118
Size
78KB
MD5
8a8f227353999a4581dad5515f4f89fa
SHA1
9f5d3fa2814017528cd7d818b42c6224537f47b1
SHA256
3b4eb2b92e257d516b11457815b3d0df4fd215a1e134db79f58d614a24921b2c
SHA512
2fb931eb85f0d3d8fc246fae0a7f0e475086b908c79b59d86c3e229f4e5571c06b99f12f15041e379fa1531fab50689a14ff6b317b526faec4995f3cc746ab1c
SSDEEP
1536:+Ti4y7+rXDZNT9XQedCAhrPzZ6vIos+z2tFZhLC8am7Zh:++ZqrzXT9XQ2jzZyz2tFZ9CrOP
Checks for missing Authenticode signature.
resource |
---|
8a8f227353999a4581dad5515f4f89fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE