DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a991e503094062fd07396b94fdbb4936_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a991e503094062fd07396b94fdbb4936_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a991e503094062fd07396b94fdbb4936_JaffaCakes118
Size
156KB
MD5
a991e503094062fd07396b94fdbb4936
SHA1
753f49805f52bf9a7d5240811a38becccfc0ebb6
SHA256
7307b65106d6984b725f3b027acdc7f06c1b2d31fd8216387bba89f05b61d67e
SHA512
e82ec31024c7e7899a0a73a360775df7895600a758ae8601eef602eb33d7bb9ff28a2a134c3175fd4320446bd77b189fafb5dd39402c8551f3a8b46e8b8af573
SSDEEP
3072:vBNNssjJ7WU/9QuL58j7LkZfB0uOYOj90f/5jP3s4suCd5:dsSRdgk5B0Itf/pP8z7
Checks for missing Authenticode signature.
resource |
---|
a991e503094062fd07396b94fdbb4936_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE