DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b0d02ceee06c58c68fedef0fe452c080_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b0d02ceee06c58c68fedef0fe452c080_JaffaCakes118
Size
119KB
MD5
b0d02ceee06c58c68fedef0fe452c080
SHA1
db6b4584bb52e61d0735b5ad2083d25dd20b7b16
SHA256
ce4d849e55a16bb1de5001c27c9a913d7d1debe33f4922f07315fbc7ac9e7e82
SHA512
4b24f709b9ebfda0ddda3712aa3498e8c6f1aa0e77ed4d9b71f168dd2fc317309986fb971d089603ead734a07349704856da287495795c4002a601e941fae311
SSDEEP
3072:EaHyUy4EZ/OZ0qiPB7zMK9+kljI3p8KbxOME0mpVTyzdfqNSNq:3yUyzZWiZPMJII3p8ixOMopZyzdfq4Q
Checks for missing Authenticode signature.
resource |
---|
b0d02ceee06c58c68fedef0fe452c080_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE