DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ce705cfb40cc380be6ce736c5662b966_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce705cfb40cc380be6ce736c5662b966_JaffaCakes118
Size
147KB
MD5
ce705cfb40cc380be6ce736c5662b966
SHA1
a0affeb0f5b6ab5ad779fedc343a61b52eafc590
SHA256
cc6ea985121cb30f3d2aba5d2cc539691c4af3cfaea6c66a8b02af1e262b332a
SHA512
0aacd57fc8703c930581f4e90804ba7464f13d7164512ed775d2d8b2730024c1e25b6dce0eb29f05c28151e01f7a9aad7264ee8c55170cdf61441ab0049b9287
SSDEEP
3072:+FZT1ANTblJH2pRCD0WtgfMyt8a/vSw0LXLW9YcPxC0jdGFU:sUblIb80Wgtl/R07LW9Y0C0gFU
Checks for missing Authenticode signature.
resource |
---|
ce705cfb40cc380be6ce736c5662b966_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE