DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ea97e54646c3ba4d776209d3530d8f33_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ea97e54646c3ba4d776209d3530d8f33_JaffaCakes118
Size
131KB
MD5
ea97e54646c3ba4d776209d3530d8f33
SHA1
4e7230b80a404a3c05b9a30c744109520f0a0113
SHA256
be34169e63cecf7ed08dcd4d021151a2e3e1e0809a02216c2cf88242acbb4d74
SHA512
b32210086ec40737b58b7b6aaa97d3e2389559af81ef795cb4d4a426da2f3aa01db0cb8e5567c7b2bf7a404b7192cd1d6cf37487b1bcf6663b8188b988f4be55
SSDEEP
1536:+aHhaaloeLQGePJZb0hz7ITgcF0XXrjo/XJUlidVBMWyWWP0ztU29ANdcO5g06ko:gIoeLQGexZxTpeFWyl0qd5g0N+cLALxt
Checks for missing Authenticode signature.
resource |
---|
ea97e54646c3ba4d776209d3530d8f33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE