DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2777719fe3154e5293db6a9a12519df0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2777719fe3154e5293db6a9a12519df0_JaffaCakes118
Size
91KB
MD5
2777719fe3154e5293db6a9a12519df0
SHA1
1f5af1666b1db66fc4eeb622deeaeede860601ed
SHA256
14a056b8535838c1c9cefa57ae5105d8eee9b0f906dbc253346d75f8158e62d8
SHA512
351d76786a3fd3303c8ca879e056229e0aa367677b044d1d61a517555bbe55ec3c585cb61b527060f7edb422fad14bb1e70a245a8f590a5391997ae55c5a3f24
SSDEEP
1536:n9eajLdlN5BoPuELd0LJiUNrLAikeH8N+iPLF9dK8vIzPwlVraq6ywQnsu9wzq0h:n9ecLdlN5B0Le0UNrLAiL8giPTnvQPe6
Checks for missing Authenticode signature.
resource |
---|
2777719fe3154e5293db6a9a12519df0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE