DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
968819306475e5d9b008d1eb8d9dc511_JaffaCakes118.dll
Resource
win7-20240708-en
Target
968819306475e5d9b008d1eb8d9dc511_JaffaCakes118
Size
103KB
MD5
968819306475e5d9b008d1eb8d9dc511
SHA1
aab65e5de565ca2a2bcf722849b2f8d4f9efacb4
SHA256
f2d3c15634c10c1bb29d96df5ca3cffab9417cdf8b7710fd6abcc61fe9c0ca5f
SHA512
cd050c3be445908e0d5004ad99a0fc27d2da4bfdaaacdfb22728ea2bdb7880766f03bed8f451a8e516d098ca3143fe0c3833eac501ecfb2434172304fefccef4
SSDEEP
3072:oL39Y0QHKVgbHPUY182Rw4beiWIT5SWdPt:ob9YdKVMUY1jRvbCSSq
Checks for missing Authenticode signature.
resource |
---|
968819306475e5d9b008d1eb8d9dc511_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE