DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a4cf0f062cc5feed9cc1c25a9cfe8925_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a4cf0f062cc5feed9cc1c25a9cfe8925_JaffaCakes118
Size
147KB
MD5
a4cf0f062cc5feed9cc1c25a9cfe8925
SHA1
2530dceb882bd1bfe99af7ad1ead3b29ffcea15b
SHA256
2f03ee2cbf57fe93480b6bc6c0dfc45e1d42f02bcc9c9754e993c6dd1200c86b
SHA512
dfda278fec26e2c7d832d168490f2b7271f41211f50a76e7da3e712f33ebb78b5d37bafbfed8f7147b0a94330866d1c9dabb9e69c93af0d0b4716c8030c3cb2e
SSDEEP
3072:JOjSa6pG79pclEdwuKyq13ZX24FHMiITzb+p/MeMQ6+SNIXwsFBmZpE:JsGGhpA0wL/m4FHMjqp/MekrNIg0
Checks for missing Authenticode signature.
resource |
---|
a4cf0f062cc5feed9cc1c25a9cfe8925_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE