DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
149c0736f490f28be1ffa5e39652460c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
149c0736f490f28be1ffa5e39652460c_JaffaCakes118
Size
103KB
MD5
149c0736f490f28be1ffa5e39652460c
SHA1
a43b453ef62818a8001be24e7e8976410b4d3a7a
SHA256
bb08c7ecf64f88dc79758344efc9d4f8935828a8cc1eb4c1f83df3e6590c376b
SHA512
d16d4c75869063d11f8377ee2f959b53ee0f5655d84a369ce6dab1e94252e32f2e7e8e4d01924346febbbf52cfbd078b590b893e18e644f1478a71e720671aa5
SSDEEP
1536:P5Ujt1ffTygh/l+0/jOF/bvYwVEHOv7sU1bw4gGNnPgCa+nny4z09dSffKz/YZ1E:mje8/4gOE4s54lnPCYyKXfiLYvnVw0M
Checks for missing Authenticode signature.
resource |
---|
149c0736f490f28be1ffa5e39652460c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
CloseServiceHandle
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE