DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f60b96e525f00896d741369e999aaa24_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f60b96e525f00896d741369e999aaa24_JaffaCakes118
Size
135KB
MD5
f60b96e525f00896d741369e999aaa24
SHA1
c042f8dea0ea16c5af6e59b70f3c5e4445c067b2
SHA256
8de9899f57c6aaeb20420eea77b4bef7b5fddb56565651ce1cba971817afb19c
SHA512
8464744fd6431e50c67a75ee00da5f1a98f20634d014a236153a5a1c9072c6ee8a42f86ccb816829dbf9ea3aa39c4c9fe6a8aa7ce448d068f63ddad1ccd85c34
SSDEEP
3072:ko0DN0aQBKdNremF6SFqkfT/J6LztUqLxpDv6S4qwuK:koK2aQAdNp42qkfjIvtn9xv6x
Checks for missing Authenticode signature.
resource |
---|
f60b96e525f00896d741369e999aaa24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE