DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3bb42ff2de9e2831a8f493a29b63e878_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3bb42ff2de9e2831a8f493a29b63e878_JaffaCakes118
Size
47KB
MD5
3bb42ff2de9e2831a8f493a29b63e878
SHA1
fae5a96499f5c5c705dc5e6c81934b8584f3ebdf
SHA256
a5b10ebbac4dc2d9c3f7e429d8da9f473a5fdf9fbece040f46b96bf4fe21f14c
SHA512
beb8dec71ca2e1a38564dd6bab6e916b018e9c01f84e2299fbff575b27c6769a63ad5c946582b63977923a36a638ac40ce7395ba7d64576dbcefcfb16fb7e339
SSDEEP
768:EfagkxeyKAzgEJnOwpChzSAqER1bfLO/4TrUP0nqewXEm6Ahu0:Eigk6iCwpCl5hvrRXUcqeRP0
Checks for missing Authenticode signature.
resource |
---|
3bb42ff2de9e2831a8f493a29b63e878_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE