DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a0a446bae2947758509b75da204be63c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a0a446bae2947758509b75da204be63c_JaffaCakes118
Size
134KB
MD5
a0a446bae2947758509b75da204be63c
SHA1
942452ea70c7bd189acfa6852d6476a2c87c22f1
SHA256
d954e3a19669d6534c657bb7df29ef66e1ed44afff2a7f9cd4903702b6b8d16a
SHA512
8f6ad81ec2fdab5934d55ce5fd6a3e5be47b9038628c487d9f82054b69d0ac266dfe06808e766444f5a3db40e773a195412a1916ca32eea79d92ac04a0f667b7
SSDEEP
3072:USF5kUUInSxhurOPjaJ98M6hphcxUf7sF7eNQaKjlfvw+:D5SInwCOPjat6hDVDSeNQl5vP
Checks for missing Authenticode signature.
resource |
---|
a0a446bae2947758509b75da204be63c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE