DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
91b0560f70ede78e8e329089e1df0340_JaffaCakes118.dll
Resource
win7-20240729-en
Target
91b0560f70ede78e8e329089e1df0340_JaffaCakes118
Size
331KB
MD5
91b0560f70ede78e8e329089e1df0340
SHA1
f3404d3d5e76b1567d70735c9040dff5fa71ff5d
SHA256
01183168d873adc71a7bf0f1c17de45a004537c9c680b948da771606d414c52a
SHA512
d993a322c47b52d0f1745922cf079d95adc94cf9faaefc52b5b017fdd7880d2093e3000f0a4c1436e11284b7d60409716929ccedaea038dcfeac476e5e9ed8a8
SSDEEP
6144:/gOXktvhhOU35RJEesNr3wU7HuAmHKmlEwrPmRPWEpWFn2E6lyD:dkvhhOKJETRByqTwr03pdf
Checks for missing Authenticode signature.
Processes:
resource |
---|
91b0560f70ede78e8e329089e1df0340_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
lstrcmpA
lstrlenA
midiInReset
VarCyInt
GetWindowRgn
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE