DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
be3e99777312f6e7ae127aae00b02905_JaffaCakes118.dll
Resource
win7-20240705-en
Target
be3e99777312f6e7ae127aae00b02905_JaffaCakes118
Size
121KB
MD5
be3e99777312f6e7ae127aae00b02905
SHA1
c1bb7127e69353e419ea72aaa1d19c01019e3479
SHA256
ca92d60733d2100a798e26874b496e150779c9352ed16960fa1b21b089adbb8e
SHA512
46765877c8e5856715ccb4ca672ff897aee806dad4af5547c65373590c367e75181b8a83debd94a35204be1c202927b7b4e78e45ba9fb6c8b656df5b931f5a5c
SSDEEP
3072:/xq9BMGJyXhUrZKvYFkuyYjGXqncX6b1RE6VGHOe:/s9BMDXhUrZKwFtFjFcqb1REQ6
Checks for missing Authenticode signature.
resource |
---|
be3e99777312f6e7ae127aae00b02905_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
FreeSid
SysFreeString
CharNextA
DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE