DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
022a62c69ff7c3871f24f060c4a26fd5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
022a62c69ff7c3871f24f060c4a26fd5_JaffaCakes118
Size
66KB
MD5
022a62c69ff7c3871f24f060c4a26fd5
SHA1
4db3e19cb2f8542286f459f500bbe2c78e97d7d1
SHA256
b4d3fa246e1cc8a93f091ee89c8083e4f025e75ae40fdd188af536eb1d2a133c
SHA512
762b67ec125c1fb211ed0ac4ffd113db3628e91b41405add0e7f497f0550b11480a204a0b0be3527580c4ba4bccce30646ec5e66c55c3ac74a4783ce71978125
SSDEEP
1536:7sHe65wZCvUItayfkGe9ThkUFIDv3vmPjflgfR8vqQha2ozx:7SF5kUUInSxhurOPjaJ9QPoV
Checks for missing Authenticode signature.
resource |
---|
022a62c69ff7c3871f24f060c4a26fd5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE