DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bbf7d860062533be150d13ecb48863bb_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bbf7d860062533be150d13ecb48863bb_JaffaCakes118
Size
59KB
MD5
bbf7d860062533be150d13ecb48863bb
SHA1
0bb701f224c7913dc246646976980712d81d573a
SHA256
3871702b5a0879dfb4b6896c42b6fa498e8642da877f7d80e22bbaf8162b2c96
SHA512
cba61a2db88f6b685e35c1b513e29c9b2c276e34977d79e22da4db435cf7313eb12f7f2c9985ab67ff990c31d451bf1f6572bc11263d9d0346574d880eaf0a13
SSDEEP
1536:Zkmp6+kPw1bAdMudiCQTwVaYPzvihD0ik3deCHEsvdoE:ymYhY1Rut9zvQD54eCk6dn
Checks for missing Authenticode signature.
resource |
---|
bbf7d860062533be150d13ecb48863bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE