DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a67be43c2ef2120541183cfeb528da56_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a67be43c2ef2120541183cfeb528da56_JaffaCakes118
Size
67KB
MD5
a67be43c2ef2120541183cfeb528da56
SHA1
4b9e23b286e77d47f0454db8ce0cd9c3a3463d22
SHA256
fb2919d1e2fb112fd52179d1e33f46e5c0bf9e804e1ab68119cc39455b19e120
SHA512
8e63e1a96d9068a32416eff366e7b5dfa2041d8fb9788b759026792f763748506fb8744ea42676eee8867060af3a61396fd4fdac12c9dce6a30774ac752cb60f
SSDEEP
1536:5jMlskK9ewAx8Kj0FxydKv70sQIT9TqK:m3OewAOo0JvuIx1
Checks for missing Authenticode signature.
resource |
---|
a67be43c2ef2120541183cfeb528da56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoGetClassObject
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE