DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0581bb4c300626c23a5fb29b561897f4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0581bb4c300626c23a5fb29b561897f4_JaffaCakes118
Size
176KB
MD5
0581bb4c300626c23a5fb29b561897f4
SHA1
dfba4c661eb5efb5a4ac73816e420f7d7b1abcdc
SHA256
b0c1f2312acb3823f0d593cae8277b8021e64a396fef0892856cba1742c08405
SHA512
03303ad51c90110a2f0fd8b58444b01f41bb87c1bf70275bfff27fe49850c953357c789f7270c667a645e1eca1c4bc76df50de808e51f9cd81f8dc2babcdd401
SSDEEP
3072:gtfx/vywxvGclEBNQq/+DzQnb+iIfTb5jqa3gCpNdPiXESrhp+s8iz6mn:8fx/vJOrA1n52a3XpfjuOiGO
Checks for missing Authenticode signature.
resource |
---|
0581bb4c300626c23a5fb29b561897f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE