DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad955505beb3e142c9c438f9ee7e02b9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ad955505beb3e142c9c438f9ee7e02b9_JaffaCakes118
Size
160KB
MD5
ad955505beb3e142c9c438f9ee7e02b9
SHA1
7773988ed084d96c17c222e7d107d4b6ff0f15c5
SHA256
104dc3e98e183411b2ecb98cc5cbaef676d7e462c2ad15a94717620b1869c14b
SHA512
8c84f49837076439398b50eb4578b3d822487fcce5e5ab276c5c33e20303e6947bbe91c12fa3058f137c0a645aa4c523295eb77b33841b48d7f03d71cb4f672d
SSDEEP
3072:T7keugt2mzWJ7hRWzJ8W6lDX4BVLg8Arht+Wm/YbsM75i3UeW5BT7R:T7keNtpkymp4Be8Ari1/YoMkkeCBh
Checks for missing Authenticode signature.
resource |
---|
ad955505beb3e142c9c438f9ee7e02b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE