DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
059e52daa7d81ba311f44cf9f475e31e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
059e52daa7d81ba311f44cf9f475e31e_JaffaCakes118
Size
137KB
MD5
059e52daa7d81ba311f44cf9f475e31e
SHA1
9608da066fa5e888243fc95e648f05baa4a17c83
SHA256
7f212f0253cb3f7bbbe62d90f07165bdc421374ebc21341cd1c15a78cdfd1249
SHA512
3099b66203c8db9763281617dba9bb926ca7aa0e26abde4ba75860ba58287b0863efc7ee5cb2cb53d782733e55ce198db697472147798dfdf0ff3636d8a51e71
SSDEEP
3072:Z4iQtZNySVS38CS5GX5U6KXvLsAnCPWhDk9rGxk1:5QtZNhVuCGXG6mJnEWN6t1
Checks for missing Authenticode signature.
resource |
---|
059e52daa7d81ba311f44cf9f475e31e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegOpenKeyExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE