DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c7a31675591c75321a6d23b535fde685_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c7a31675591c75321a6d23b535fde685_JaffaCakes118
Size
143KB
MD5
c7a31675591c75321a6d23b535fde685
SHA1
ff4e5e6d15fca7c77e46313763e6a133130f6a34
SHA256
e9680844c24549bae126347fc48943926253f966bd0b11ea22a133a1304d3c86
SHA512
87295689785e29ffe6feae08dbcdc3cb4f23d44b2a9cc0c967cab1ab3d480d1fe593413da4181934192c3bf626216b78368e3b0dc1dd47fac70b17ebb00c3601
SSDEEP
3072:NFJyp31XujeTkCQWpqxnDRYoXMF+YrH5wKmFAUXv:NFJar4WYnPBY7CKmFAwv
Checks for missing Authenticode signature.
resource |
---|
c7a31675591c75321a6d23b535fde685_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE