DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ea50fbdc196a4a0a8b9331ce0441c1b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3ea50fbdc196a4a0a8b9331ce0441c1b_JaffaCakes118
Size
154KB
MD5
3ea50fbdc196a4a0a8b9331ce0441c1b
SHA1
28ce70acdc985f457b5c0b752ea4589ec42acaa6
SHA256
c0e9323a8f6870d15f05030154074f8e49e2a102aa7ccfe42043bba31f0e39ce
SHA512
ca905cce2fae6833dd895cd2d5d0c480c073c0e37b5fb730052df74d96fc51a0abe8e20c40e6336dabc23a0f464fa597f04d278b2872ae47447cf520fe0fd643
SSDEEP
3072:MI8CXqlqr1giQ7hDIY+uJWxbaP7z8qbvi9ZllL7OCQFWrDmshmr6:T8CXqMaiE5+3KzbbvSA9Wrhhi6
Checks for missing Authenticode signature.
resource |
---|
3ea50fbdc196a4a0a8b9331ce0441c1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE