DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5c23de2328cb66ae54f6bd5032e2b3f8.dll
Resource
win7-20240903-en
Target
JaffaCakes118_5c23de2328cb66ae54f6bd5032e2b3f8
Size
103KB
MD5
5c23de2328cb66ae54f6bd5032e2b3f8
SHA1
98da00099b22acd8a566a3e5f39093990f24e843
SHA256
1f9e659a758f3c817a407021cc8aceaca588ab8716541961894204bf5c620f4f
SHA512
0b9823da2f89183872e6bd005a87c6d374f10ebe1a0338b75588ae16cd4bbab4b5cff23cb67f14f18e73d5e0af8ca88f0b8e601f140058738a2c73362797b0b0
SSDEEP
1536:nfXAelfTwM78NqibAEJH2pyoia3rPBafna/UfLVx+JJgXT0SqPTOnPym:fFZT1ANTblJH2p9bPBana/M5cYALQj
Checks for missing Authenticode signature.
| resource |
|---|
| JaffaCakes118_5c23de2328cb66ae54f6bd5032e2b3f8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryValueExA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE