DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a782e736d1ac09540fb254b1634ac562_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a782e736d1ac09540fb254b1634ac562_JaffaCakes118
Size
147KB
MD5
a782e736d1ac09540fb254b1634ac562
SHA1
6fc5dbd8f9bfec5d9a1c1fc3176cbd9639230ab4
SHA256
09126a9aafff1d672655ef9cab625363b7babdca81ea22d094a39fb703041d44
SHA512
a20efc039ba7585e40f8bf4a62285fea944d8e40e2aa9e9334f2ccafd13b2a66d50f6184f403511734f9fcd415758893ab9f5a02e9d1f538af81037325d88226
SSDEEP
3072:UOUb3TDRuZ5rYJMqf0Dqfx6rcl0X97PMMyB592XPrjyZCCiYkJH7evSBtFY:UOWnEZ5rYBf4rdtkD2XPPILkpeOtFY
Checks for missing Authenticode signature.
resource |
---|
a782e736d1ac09540fb254b1634ac562_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE