DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
baca230394010a4e184dcc5d89cb4337_JaffaCakes118.dll
Resource
win7-20240708-en
Target
baca230394010a4e184dcc5d89cb4337_JaffaCakes118
Size
119KB
MD5
baca230394010a4e184dcc5d89cb4337
SHA1
180f361ddc3b96c86ffaff04e61c1edb1bf75ca3
SHA256
92b9c98e135414130e221bfc15c1f300c5c8bfe7c43ef163446a4433c7608213
SHA512
de01fd99a6f6e1278b9ead8e365a6161451e9ff78d824561b49ded1d2e9040745a7904b5e5dcf919ccc323d1b659f6c02920cb9bde5daf26227f901e07bb5351
SSDEEP
3072:aIoeLQGexZZUFwbpTvgBE9ISbOdgyRXjT:aoHanUOE6bOdgEXjT
Checks for missing Authenticode signature.
resource |
---|
baca230394010a4e184dcc5d89cb4337_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE