DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fe0bb57f738a7a15314f9c2f30111a00_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fe0bb57f738a7a15314f9c2f30111a00_JaffaCakes118
Size
159KB
MD5
fe0bb57f738a7a15314f9c2f30111a00
SHA1
e0ec47efbe7d5ebcc8f87c7bd0c263dbf6f5b759
SHA256
86918f597930202c0ff80d25b809bc13e3ea614ae816125905d31dd3227086f5
SHA512
6f238b3bc4ce48f02275429bfd1a86694d1aeba135ec8d89b59d994efb2b2bb3be8520012358c9055656a0dc4366417645fafc0fab89637adb07d0220048f1f7
SSDEEP
3072:8P5PIXN52W/Isbl9DNl8890divX5DMdZL5BPKRakBbs8Ld0ikkPjIf0:8xKDIklHlh90YqdZVBCfp0iR8f0
Checks for missing Authenticode signature.
resource |
---|
fe0bb57f738a7a15314f9c2f30111a00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE