DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bd7b04c8d29f3cbdc9bdfa1c771ee6d0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bd7b04c8d29f3cbdc9bdfa1c771ee6d0_JaffaCakes118
Size
131KB
MD5
bd7b04c8d29f3cbdc9bdfa1c771ee6d0
SHA1
29cebeef2995d836bfd577dbd97f9056d4756c0b
SHA256
f0214a147600b798f2ef919e4b095bde3145046c7777a66ac28c9970d315830a
SHA512
9f3ff980315147d0b8b269c5a292c343a62b942c723ebb037625e10a5d7b5a161216fe0ad9adba2564c363d623b225497541e45d907f2554b0dfdcbcae9e1474
SSDEEP
3072:P9ecLdlN5B0Le0UNrLAiL8giPTa81dmXEFUkQAGLd4cNrWRbeWJLSdcnFy:syxT0StYTa81dQEFGAGLdseg+QFy
Checks for missing Authenticode signature.
resource |
---|
bd7b04c8d29f3cbdc9bdfa1c771ee6d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE