DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b1229468fb20d4e921b8c8de693b153c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b1229468fb20d4e921b8c8de693b153c_JaffaCakes118
Size
71KB
MD5
b1229468fb20d4e921b8c8de693b153c
SHA1
7ccd1ac64ee8181108f7b42a09b84dc59082740f
SHA256
a4edc8bab80317d5ec260ad1f943ddd12f5c20d07735acacab36d0cf89a59428
SHA512
45360dcec02fdebea2330c0e31aa20873c20dc68116d0b6f1857fb7c4a7437cad77ead1f63cd66e6e211e37934703e15675817ad17effc84e3f3bb82e236efb8
SSDEEP
1536:Zkmp6+kPw1bAdMudiCQTwVaYPzvihD0ik3dutwcBg6aOHiJklz/:ymYhY1Rut9zvQD54uyQg6biylz/
Checks for missing Authenticode signature.
resource |
---|
b1229468fb20d4e921b8c8de693b153c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE