DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bab75b6fd9d598886144fdfaea92abb9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bab75b6fd9d598886144fdfaea92abb9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bab75b6fd9d598886144fdfaea92abb9_JaffaCakes118
Size
63KB
MD5
bab75b6fd9d598886144fdfaea92abb9
SHA1
378cc339f14c1d23820fe9e5c572c43f530ed35a
SHA256
9cce734bbb48d25b43ffe70f5b82a065879c28a1a6d3aab937470bbf8b749e43
SHA512
a9722c31b3778b89fc593bf74887a62252a36fdaa9df75b7e83c8849f760b9f86cebe20da59167e091aae2364b0950372cd56be43e1d645f749c9f66c271ab51
SSDEEP
1536:Q72O8cyBSF9ozg6EliYSaGsC3yaaSrKSHG2niOcrQO:mT8tkliYFC3yaLrKUnH8QO
Checks for missing Authenticode signature.
resource |
---|
bab75b6fd9d598886144fdfaea92abb9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE