DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0544aefedc39da1436a55d128b27831f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
0544aefedc39da1436a55d128b27831f_JaffaCakes118
Size
178KB
MD5
0544aefedc39da1436a55d128b27831f
SHA1
953792513147e55900c3176a218ea9ae5b72b3ae
SHA256
7c23447ec63f05083454dd43f1dc18ecb7eb5d4fcfa537813f0f44d99c5d3870
SHA512
633150c36dafe4101d20287b6a65f3861b568b618b0b058e1bc39c216cc7e66753c4ac59ddde62c0a7b7ae16daa472ea92e71b250ebebcdaf439e2b3ddc8f0c4
SSDEEP
3072:IjWz0yvwUnXZ6hBqwQ0lzj5Y9XuVs9cfe6eu0h5nK2p6dDCm0C53anmzyx:nz0yoUXZ6hnxYwW6d03K2Qx53anmG
Checks for missing Authenticode signature.
resource |
---|
0544aefedc39da1436a55d128b27831f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE