DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8ad122cdca851d6d13fa412d0ae7068d.dll
Resource
win7-20240903-en
Target
JaffaCakes118_8ad122cdca851d6d13fa412d0ae7068d
Size
155KB
MD5
8ad122cdca851d6d13fa412d0ae7068d
SHA1
baa07f8c35cbde5761ee172e35445210a23fc607
SHA256
b989aa707cd3fd48618d40d3477de262c770b79199248c6718f486ad22742ba6
SHA512
ac0a863ea91824d07ef1bf890499aa4973f0ccefbf9899f20a918ae1dcc738ae730320cdd6adda56548cfb23d72e72121c5e1e33caf28c16b2351468c38150fc
SSDEEP
3072:+Eqdt8eZtEzG5ZX3Moj0+JLpLOhVkZUB3xaWDgmZE:0dmeozGXX3MGL5OQOBBaWnE
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_8ad122cdca851d6d13fa412d0ae7068d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE