DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
064c313d53f1ea8abb7a127ac76cf380_JaffaCakes118.dll
Resource
win7-20240903-en
Target
064c313d53f1ea8abb7a127ac76cf380_JaffaCakes118
Size
66KB
MD5
064c313d53f1ea8abb7a127ac76cf380
SHA1
99c9edf0cb0685ba37489d0dc413e0ab5c325064
SHA256
c930386e97aa22cfba6359801f818e1bd15dc88fb0e31448c04e5f117a35a6ca
SHA512
08aa840f1b0ba67c95e95bcb1708ec215de50d7a7e94f0596eeb0f13ea075408169c189918601804a378d62e4681e19a620493ff5846490187c9e71c541f0973
SSDEEP
1536:isHe65wZCvUItayfkGe9ThkUFIDv3vmPjflgfR86X1G:iSF5kUUInSxhurOPjaJ5X1G
Checks for missing Authenticode signature.
resource |
---|
064c313d53f1ea8abb7a127ac76cf380_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteKeyA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE