DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
256eb3086479e900e7ce3c524f709474_JaffaCakes118.dll
Resource
win7-20240903-en
Target
256eb3086479e900e7ce3c524f709474_JaffaCakes118
Size
67KB
MD5
256eb3086479e900e7ce3c524f709474
SHA1
e59d772f5285ee5a5fc8d2b48d1ca13c68cad572
SHA256
6a8ac87a11512fbda0952df8527ebd06b23cc53b495b0d7bb85290cb9fd69f25
SHA512
5ae820df229dacc8e6542f4fcb0e5dc47669c4f714e47226dd22e96faa16419913f2f1b59362a5525326c90911947d5ce50f2a83c299375216668fe441993c7c
SSDEEP
1536:caHhaaloeLQGePJZb0h57mVBd0LFGlTNxG:aIoeLQGexZzdMETNxG
Checks for missing Authenticode signature.
resource |
---|
256eb3086479e900e7ce3c524f709474_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE