DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
05dfc1db42de8b78ca3a9e2f6b8a1b84_JaffaCakes118.dll
Resource
win7-20240903-en
Target
05dfc1db42de8b78ca3a9e2f6b8a1b84_JaffaCakes118
Size
93KB
MD5
05dfc1db42de8b78ca3a9e2f6b8a1b84
SHA1
5a8e3eec9c8d552008aaec2a77467c5974db92f9
SHA256
b7e342f85fc658f1ba02105b1565954de61e4247f0bc8611e359073ac7911eee
SHA512
ee72dffe885962ecc85e018e6ff6c4c8ba799693344d81b8a6379829df405a674194f67f30dadfdd8ddfc39bee23ecf98afa8bb19f732bf596e249dfc265bd5b
SSDEEP
1536:RP4iQtnZ1pxm+obyhKwJIYisaQS3vUMydR2MMMc9mp46rQoGbw2q0SZhK8WB:Z4iQtZNySVS38MqQmtrQJw2N4/g
Checks for missing Authenticode signature.
resource |
---|
05dfc1db42de8b78ca3a9e2f6b8a1b84_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegOpenKeyExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE