DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1450888cbb07575f451919d4e52a0bf8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
1450888cbb07575f451919d4e52a0bf8_JaffaCakes118
Size
83KB
MD5
1450888cbb07575f451919d4e52a0bf8
SHA1
05660d471450c01180299347696ab2244e9837af
SHA256
7c60ce352db7873a37955a1eda649a574d74c82215545dd13d72c49853605ec5
SHA512
483bb25f27e83670eed70237b43a4c794f31131e8e90c4bf5c635e2d7c157c71415aa0850d76902c77aa9d48726c2c78394084c0525a7d42db98edaa62db6cbb
SSDEEP
1536:QiyYaBy+xVk48MIUWIB1AZgraLCk8jYY/T1bvLteg08PEiYkh:Qi3+KMI1Uga1Tj9Rftemb
Checks for missing Authenticode signature.
resource |
---|
1450888cbb07575f451919d4e52a0bf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE