DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fee2aeaee4819783857567c93e360bfe_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fee2aeaee4819783857567c93e360bfe_JaffaCakes118
Size
99KB
MD5
fee2aeaee4819783857567c93e360bfe
SHA1
46e648a48e63c944c4286ee210f72c2044539097
SHA256
44c5ac123e0564afd36b8492cc2bea5832eb129e739c7bbf0ef1d9e80d15cb73
SHA512
c835714a26a45f50e94fd9238e2b3aa06b9fb7dc3ebf5161bb6e2cd6b19285c191dfd618fcb982e3b4d2a634362cd9f652ee4c9077bcb1d8c7543441bf793e30
SSDEEP
1536:a10j6M4eOKEEa3qDaj+4fC618kLJKo0Aw8tT7/Y36zYjxEkRLz/eYXpTEheKiM:9jOeOK7siSF18KuAwKjY3fNJd/VZQQs
Checks for missing Authenticode signature.
resource |
---|
fee2aeaee4819783857567c93e360bfe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenProcessToken
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE