DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b9a38609351dae5a1f6af6713cd998c1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b9a38609351dae5a1f6af6713cd998c1_JaffaCakes118
Size
113KB
MD5
b9a38609351dae5a1f6af6713cd998c1
SHA1
9d7eb6c49de1de621ab82c565f1116bba5273247
SHA256
fcdc94739bded0e1af27207f472d7c32637a3249179e2a727230912b7b78bb27
SHA512
ec1de7e5d690acf2445e97dcb1ad7b2093f3dd72ffdf23216f80802c9d016e184cdb43509a39eaf506f2db3d4b32cb3dd598318bb1a9168aa357a2067b56b1ef
SSDEEP
3072:8RMpJ3LsdftmwfvT1e+K++PRDE8VoBbm7z+pKYQf/FD6:8CL7sXdfvB/6tMQz+pKTf/h6
Checks for missing Authenticode signature.
resource |
---|
b9a38609351dae5a1f6af6713cd998c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoGetClassObject
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE