DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
04a2cda0ec88868ae785dcad358fe47d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
04a2cda0ec88868ae785dcad358fe47d_JaffaCakes118
Size
90KB
MD5
04a2cda0ec88868ae785dcad358fe47d
SHA1
eefb701ba59b73e32d8647990882d1b081a77660
SHA256
f2d132b8f64f793206abb1e47589e65209daa62ca4411571b1af97f3670db4bf
SHA512
d7513d0ed00ec78c35b44cd19aaf74679b1256b65b4500723a53c78580f828bf97a0b22921d5c65b12a61a36a8fdd0c035a25ba9ea28b71847c4a334553e3f1f
SSDEEP
1536:7sHe65wZCvUItayfkGe9ThkUFIDv3vmPjflgfR8vqQkq+B2GJqXUOPN7+eds72UK:7SF5kUUInSxhurOPjaJ9QISNCGsqL
Checks for missing Authenticode signature.
resource |
---|
04a2cda0ec88868ae785dcad358fe47d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE