DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8c8a0f6b8bf3b9fe6e45024ba0b2cc57_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8c8a0f6b8bf3b9fe6e45024ba0b2cc57_JaffaCakes118
Size
127KB
MD5
8c8a0f6b8bf3b9fe6e45024ba0b2cc57
SHA1
244babe8b185281733af05751b215b8963ab44c2
SHA256
38ddcd53b07826f35ff4d690dda40b7ace888ead3f542415ab78da3645842741
SHA512
285127b9c47e99310db4fe275ba5b48ea631c770420354530a2c551c67da847d7c5d220700581169486940720124c396dd002fd0a4c2517dacd80f9e617e9af2
SSDEEP
3072:ymYhY1Rut9zvQD54/dgUxYO8qz7E2GE263JxtdHt2XbBU:ghiROzva4dKy3EVf63JKXbBU
Checks for missing Authenticode signature.
resource |
---|
8c8a0f6b8bf3b9fe6e45024ba0b2cc57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE