DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bc5c9cc9d1fdaad42e6923408ede8637_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bc5c9cc9d1fdaad42e6923408ede8637_JaffaCakes118
Size
83KB
MD5
bc5c9cc9d1fdaad42e6923408ede8637
SHA1
977173bf1e6cca007984473f18b4fcba8af2703b
SHA256
fb477aa541857de8824b7d1491e82e8207972fc3d689e14aedf37cf8ed3675ab
SHA512
2901b9a66f15d0109c6b4820a1d39d05c77d597a67022a5a7755cf31c4320354ef047543c7fbfc251e3238daa541a4e0fb632ea185644da2e5ed40d102cf0db8
SSDEEP
1536:muVEWl/lOZXf69hBSk1f70TQF0OPTxmN5kbSw4iPfpbssbBt10cM5rmvtVJL:muVEalgXy9ak1wTHg0kbSIHpXqrYtz
Checks for missing Authenticode signature.
resource |
---|
bc5c9cc9d1fdaad42e6923408ede8637_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE