DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d9924e116f9e86321b03fc7272ab0d8e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d9924e116f9e86321b03fc7272ab0d8e_JaffaCakes118
Size
99KB
MD5
d9924e116f9e86321b03fc7272ab0d8e
SHA1
9d3c2766021d96d1306789605fcc7c6ec374c10c
SHA256
71f857d22972e7fa20b067e6f26f8466080096c6dd48c0f056024787b8180672
SHA512
279ed85b38e6d3ffbbe7ee75d5e34bdcf2aa5513f22cb56f6b397835f27d48484f42f99e5409bc319062165fc8bbe19fbb83c5202f49708754dd12b515653f67
SSDEEP
3072:JOjSa6pG79pclEdwuKyq13ZLAQfVWU2PhJQBQpf1cMKV:JsGGhpA0wL/Z9z2PhOBQVzKV
Checks for missing Authenticode signature.
resource |
---|
d9924e116f9e86321b03fc7272ab0d8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE