DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
171bd6730f337f94f3ad3f729f514a2f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
171bd6730f337f94f3ad3f729f514a2f_JaffaCakes118
Size
115KB
MD5
171bd6730f337f94f3ad3f729f514a2f
SHA1
e2144f2147664168174da7886608fa1afd189491
SHA256
dfb9d0247fa61c6072fe309e8cd3737ec3ecbc8bf19f19c88c761580fabce302
SHA512
fdbbad17587869f9c1cfd278115f68171294de59ed7fa7fd47d844c7793084f2499740f553f69bd2e9bc282cda54a9112e595cdf0edb05b17bcd9d291d541b26
SSDEEP
3072:J0RTyq0LFSazWIqy719L/h6tXWypwHv9uNwMVc:2Rf6hzqW916tXHwcN36
Checks for missing Authenticode signature.
resource |
---|
171bd6730f337f94f3ad3f729f514a2f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE