DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e0538c0893284736663ca230d8884f98_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0538c0893284736663ca230d8884f98_JaffaCakes118
Size
96KB
MD5
e0538c0893284736663ca230d8884f98
SHA1
b4317c154a261292fdc49fd6960a9cb30a214f7b
SHA256
12c1289b4d8ef2a69fe92423e758fbf2a7fe72b3dc39410cd474e4b0f7d8bdea
SHA512
569508245e87f983b6822cd89d8109242ee4201331079e9f4807bdb73d53b14cccfc9c98833be1ea8ccd1c472661445e4b36e8663655d3717cdef5cf0c8a641c
SSDEEP
3072:2S9DbS5Z65cc09UEvcyhPl/VOtmX9rfof:N9Db86589UYzOgX9rs
Checks for missing Authenticode signature.
resource |
---|
e0538c0893284736663ca230d8884f98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE