DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a4d8c57f58efa99677e0129f4c78ab3c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a4d8c57f58efa99677e0129f4c78ab3c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4d8c57f58efa99677e0129f4c78ab3c_JaffaCakes118
Size
155KB
MD5
a4d8c57f58efa99677e0129f4c78ab3c
SHA1
17ba6e41f304bf5828285b56e2cdc5a3d5bc60fa
SHA256
fcb293d820360a8cacc74e94465c1fdeab17159b54f713e96667da7a765dd28c
SHA512
6f16282257f8c330323d87c370dd539574591c691e76a8358ca72fe86d8dafc27ff542c5aeaa15767db78cff016023ae73cfae62672aebc9e289f2d771991f70
SSDEEP
3072:N+n5G0DyKCZzKy0yWWA+DOZAoZMb30vynleOQO1JE1rVg8rzs:N+n5V/CZp0IfDB0jNO1WI8rzs
Checks for missing Authenticode signature.
resource |
---|
a4d8c57f58efa99677e0129f4c78ab3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryInfoKeyA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE