DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d6cb501790385a163ed2f9b049ce672b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d6cb501790385a163ed2f9b049ce672b_JaffaCakes118
Size
94KB
MD5
d6cb501790385a163ed2f9b049ce672b
SHA1
fa6fe8a8f4e8e54cc8e2374ee7862a6449123131
SHA256
12bea2e017b3df25698d12ff9ce9c52a3a8b965906785e9c1bc9269d84eff4d6
SHA512
212d7d1cd44d2b7f278d5fa6a0472da1c0da2c79813ec9ffa6ea718550c4a6a968572612a34804b4475aa6ce956b2f8c10fb8f799abc964c3ae45b49f7456b5b
SSDEEP
1536:rxWgutYZYAPIYFCte87LDyHB9B4GEVMMzXTgP441fd8gzc1SM3EPx0YjBRaFYflE:IDmZ1PI3MKmHrf9P4WfyscN3K3aJxR3
Checks for missing Authenticode signature.
resource |
---|
d6cb501790385a163ed2f9b049ce672b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE