DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
afebec6cf934a3ba3e886a868a54e976_JaffaCakes118.dll
Resource
win7-20240704-en
Target
afebec6cf934a3ba3e886a868a54e976_JaffaCakes118
Size
159KB
MD5
afebec6cf934a3ba3e886a868a54e976
SHA1
0ef7a52cf0b356f921b184bfb8dd9c56675a0aed
SHA256
49bd86aa41f0ca4911bf6eb0dde752e91c284ba6e3e4d3aad8ec1f74f59b6371
SHA512
439afe9443ad15676e1adb5871a9608014b8480e979b114037ba6538efe723bcb97e2492361cd6ffba66a6446e26ef2cbcd05db9fe1b046e08871bdb66baa115
SSDEEP
3072:oi3B/m14eWMZ7rRqEq09Itx1qTNcczKvW6dqu0xKLTlsDu3C7Xw:n41wm7rRqEqqItxYSvWPuHsDu3C7A
Checks for missing Authenticode signature.
resource |
---|
afebec6cf934a3ba3e886a868a54e976_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE