DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
efaac736926a71b6754e230dd2fc0fa5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
efaac736926a71b6754e230dd2fc0fa5_JaffaCakes118
Size
80KB
MD5
efaac736926a71b6754e230dd2fc0fa5
SHA1
50f039ddada8cccca8f5afc77edfc3fa24214448
SHA256
f1244b9e7428be278f0a25b0aa552caacb2851435c268c3f0e130fb386972bae
SHA512
bb4c5c9dbc58a863836a6c71b553c4cc54881f5aea5ba7b7eaf6065dcaecad52911632d04a56c8624bd7fd0b6b512233605506a49779f889878de436d5a0bd72
SSDEEP
1536:s3wmRo4PmnrPsCeezU3GnMBl+Cm8HAxaVOJ+GR0frS4zIN3Pz4ny1/uo1:s3wm4rlzU3MMb1Hg8Ol1Pzr1b
Checks for missing Authenticode signature.
resource |
---|
efaac736926a71b6754e230dd2fc0fa5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
FreeSid
SysFreeString
CharNextA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE