DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fbad92bf13023cf26a6d9bb7c8fb12df_JaffaCakes118.dll
Resource
win7-20240704-en
Target
fbad92bf13023cf26a6d9bb7c8fb12df_JaffaCakes118
Size
119KB
MD5
fbad92bf13023cf26a6d9bb7c8fb12df
SHA1
45e52729809e553f5f59855bc390f4cbe49d93ef
SHA256
6154d28fb3c0bc0530820848a329493c827658f005f91e0034845e16cd56ce62
SHA512
8ef0d76c99dab5dd65c2bb5a94b5e1220eaa1527e1ee3cfda224abcf5a5368b162d6a6dd056d199b1cc8ced65e7338bc8bfa2d7f374e66a724a109099d34e9e6
SSDEEP
3072:J0RTyq0LFSazWIqy7s5FIQng1pLmWaq50zT10rnfAK2vpB:2Rf6hzqhngrmLzon4hvX
Checks for missing Authenticode signature.
resource |
---|
fbad92bf13023cf26a6d9bb7c8fb12df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE