DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ec197b5c8909d75debb5d01704a98b76_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ec197b5c8909d75debb5d01704a98b76_JaffaCakes118
Size
143KB
MD5
ec197b5c8909d75debb5d01704a98b76
SHA1
226055128eafd3f71c50b2f4091b30373e3a5524
SHA256
99fe45f8d27399530e9ee57a73a1633570d6df96aebd2b5b7ddca3aea311729b
SHA512
730f815d4a82c98642804a1cab5f47eb9b02b5181635aec1470e63a726635804f7e09e855c37790bb9702e3e1214d88ddb8ce87423bbc50d29989bf93a2d1ee1
SSDEEP
3072:m3OewAOo0JvuIx1ElLzmsoW6cOGHeq/mKllqb:m+VdvukgL6PW6cOGHeYZlQb
Checks for missing Authenticode signature.
resource |
---|
ec197b5c8909d75debb5d01704a98b76_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoGetClassObject
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE