DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6425b2fcdf2f825b105a31c3f4b64dc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6425b2fcdf2f825b105a31c3f4b64dc_JaffaCakes118
Size
123KB
MD5
f6425b2fcdf2f825b105a31c3f4b64dc
SHA1
30617decf171416b035539ade04f0165134fcac9
SHA256
b56cbe9b1fbcd892589aba0ec5d5e0c0f5090a79a8ec40840c223cbbd8f4dbba
SHA512
e4978c079f59cc9505fd36e7c9c97a8b4fa1a699885c71d59ef70f48f38f11bf94e6c073c4d8712d62c3a6b8206cd7f4a8256549d886247d10c6dc87eb3825a9
SSDEEP
3072:+FZT1ANTblJH2pnM4VNZNQBJQH/pI3KQdr+UHltbNs/aNi5ka:sUblIXNyUhkBdKS/NZNi5N
Checks for missing Authenticode signature.
resource |
---|
f6425b2fcdf2f825b105a31c3f4b64dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE