DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eaf407317c752d603de63e7fdf14cecf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eaf407317c752d603de63e7fdf14cecf_JaffaCakes118
Size
118KB
MD5
eaf407317c752d603de63e7fdf14cecf
SHA1
a8ddedc9d5fb995d5f81cff20f0cb5440db53964
SHA256
589921545edc14e23b8837906ba6e9426a56ca062ecc381285c087ddb2e6f613
SHA512
3400927a02b7f0fff063316910dbb3983109e8fd7ebc6da52c21efaf8e5a1fb8451760e42143c3b28bf7ab429620c9c8692577ae9082715d1aa45852d0005c19
SSDEEP
3072:HSCw7otEVJ5meyO9o3pNwjizhdxWw/WnK9XPde2x:kogETpzhdxWgmK9t
Checks for missing Authenticode signature.
resource |
---|
eaf407317c752d603de63e7fdf14cecf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE