DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c77088d6bc2aef4b434407cc9dec38e6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c77088d6bc2aef4b434407cc9dec38e6_JaffaCakes118
Size
167KB
MD5
c77088d6bc2aef4b434407cc9dec38e6
SHA1
326dfa8ff128c0a8f5decfdd17f7f48031a4d4dc
SHA256
6c2a1ceabf9bb0567baed6ec1b3ceef20fc704854d7410fdc770d41c30d4c9ed
SHA512
3c71af58a17122494f63ed84c46daca408ddbae3d1e5b4810317abc3b2382103b0922f52a54f99ac9516c873075c1bd1d84c3d2677577b174416309a801451a9
SSDEEP
3072:Im2DUsRzbAZrU5bY2mqFdma8x857OhXNy1ATfkeIZLHu1XQ5Zpx:b2dqU02mra8x8ey1S76HuxQnD
Checks for missing Authenticode signature.
resource |
---|
c77088d6bc2aef4b434407cc9dec38e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE