DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a83fa006db2d2e85f8edbd0cdf52745a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a83fa006db2d2e85f8edbd0cdf52745a_JaffaCakes118
Size
146KB
MD5
a83fa006db2d2e85f8edbd0cdf52745a
SHA1
2a319654d1b7d9349559e5324f89da1db57aec77
SHA256
4c029c257b2cb790c0b1fba9d00080ed5a7171515804597c7b72eebcdadf4959
SHA512
b0cf0f5cc57661014ca59311a10f990827ce717d242e9cb0513e4dd093ea71ce676ca1b436b84aebfa858b152030a5784448c7bad6552b02b74b332266b53df6
SSDEEP
3072:JI8CXqlqr1giQ7hDIY+uJWxbaPZ+1oH0tmx/cfazHSfxEfH6GH8L5YppzWcphrG:e8CXqMaiE5+3s+1oiA/cfazHSKaGH8u4
Checks for missing Authenticode signature.
resource |
---|
a83fa006db2d2e85f8edbd0cdf52745a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE