DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4267814e09ee4bdfb3b102230a22725d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
4267814e09ee4bdfb3b102230a22725d_JaffaCakes118
Size
87KB
MD5
4267814e09ee4bdfb3b102230a22725d
SHA1
7b7333f80930943ca44dc0027114a2359161a048
SHA256
c13ecf9dc6b46585e188007736b029f6186674b07058756770ad70860e3d0e2a
SHA512
38a42c80467b1faa98e37c49f1b00e3fbb44eb2a216fbb4fd80c50fb08541268e80152df36ee9f792bc201a3a04d08a3ab2bdbfb58b119b4a246da91624873ae
SSDEEP
1536:Zkmp6+kPw1bAdMudiCQTwVaYPzvihD0ik3djU3SCBK288V0QdiKL2dOZ+/4Z8MKA:ymYhY1Rut9zvQD54g/ofx8Z+QZQA
Checks for missing Authenticode signature.
resource |
---|
4267814e09ee4bdfb3b102230a22725d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE