DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b.dll
Resource
win7-20240903-en
Target
39527733b55f4411b10c32558e7a96fa_JaffaCakes118
Size
44KB
MD5
39527733b55f4411b10c32558e7a96fa
SHA1
89a07d4d4886674e493d585f85c45eaa7fa01e64
SHA256
e145350adce8749251840ebfafa1c5d71bad4b1232604ad0aad18ecda6a56654
SHA512
99511615c87e70095f9da1377b856eaa6529f531f6824c2160d322187436159d20ceb507055ac03aef5e7df9561585632d9a3880520038496d5f8af983a00fb1
SSDEEP
768:/GgoxdSHrlUjarG/6ieQrixhox4YJpOnUu8gMlgng/mOyrXOJ:/VoCpaR/frixYJpru87gng/mVrXOJ
Checks for missing Authenticode signature.
resource |
---|
unpack001/b.dll.zgx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE