DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ebc74b6cef970833e9357cc365e0e7b9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ebc74b6cef970833e9357cc365e0e7b9_JaffaCakes118
Size
110KB
MD5
ebc74b6cef970833e9357cc365e0e7b9
SHA1
37f46441d01a7e5e3071e5f78d5614a8e82bbf1c
SHA256
012f81890d3b1fed7d3fa6ca762662c76b782d9849c9f32139ac0b7d12a96edf
SHA512
fc777eaebbec39c3e2169d6c33b67ebdd38e6d51f20a5154bd529ba4a8b39b69065c009c7c4539a3103b43381dee2726da36837fe657638f162a70db4decbb20
SSDEEP
1536:HsHe9xfoxA07otEVqaXjHgNnObJFK/euxaqbM9o3pMWLmROyzTknwqFb7p5hkN/8:HSCw7otEVJ5meyO9o3pQqnwXs7TL
Checks for missing Authenticode signature.
resource |
---|
ebc74b6cef970833e9357cc365e0e7b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE