DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ce0c0092e3c871d465a3cdf5b03fb6d5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce0c0092e3c871d465a3cdf5b03fb6d5_JaffaCakes118
Size
111KB
MD5
ce0c0092e3c871d465a3cdf5b03fb6d5
SHA1
b8bf6021c4aca34c50e95b6f780d012b6f0fe806
SHA256
2bf6a2c93245e1461d15d58ee9c02a6c78dbe14442e4e93a7cb57aa6c7a79232
SHA512
d7d116720c87369b6240db941ec2c4d72fa06a158cf51bb3b57625cd12d6f00fb6544c3cdc85ce36c69586c27b3c47f54f23db7e0d62d9fbc2e2403c9624fc29
SSDEEP
1536:P5Ujt1ffTygh/l+0/jOF/bvYwVEHOv7sU1iXKnCzRcqptgDIcCtZJnxcRkOofkCY:mje8/4gOE4sQU2BDIFtKRDo3cbt
Checks for missing Authenticode signature.
resource |
---|
ce0c0092e3c871d465a3cdf5b03fb6d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE