DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ec004e55776606315a6d460804ac4783_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ec004e55776606315a6d460804ac4783_JaffaCakes118
Size
71KB
MD5
ec004e55776606315a6d460804ac4783
SHA1
c8c27f3fab118ead46c9ee27caa2ecb888f0ca3e
SHA256
62fd9d21af36516b99e6da76329d445fe46ac91165c34ff8f39287818fa09b15
SHA512
59278e659791024582aa6a141a32a3ed7b69de00e9df6419b377db9355d8f40ce4f0f755d8075055f7c4f3d86ca1cb47bc2545a91a083e14936309c03064c634
SSDEEP
1536:IOwsHIGW2KOxfOtlScVkRJnb3LpFmqrKNE6oyIsj:IOjHy71AckbbHfrYtoyIi
Checks for missing Authenticode signature.
resource |
---|
ec004e55776606315a6d460804ac4783_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE