DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8d864e00ee27737c874569ecd6e5e534_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8d864e00ee27737c874569ecd6e5e534_JaffaCakes118
Size
135KB
MD5
8d864e00ee27737c874569ecd6e5e534
SHA1
f161757cb62a46655865b1e7540933a7105c96dc
SHA256
20af0132374703f16c9069bdee02f789cc7d5d4fdedb35e56f7f41f14793868c
SHA512
e429b950b82cfa5b2723a04d3e370a68bf6a763e8adc36accaac8c09e6f5d247802c4914997e65c8fe71ea0e4f97d81f737405610f393110a3e7f285243caaea
SSDEEP
3072:IOjHy71ABH2wFBTmrrs3xaMFIOAtsj0yz92:DjHy71ABH2wFBTmrQ3xaMSOAmD92
Checks for missing Authenticode signature.
resource |
---|
8d864e00ee27737c874569ecd6e5e534_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE