DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8af1c24e8f293eb59c4e2184a8b6800f.dll
Resource
win7-20250207-en
Target
JaffaCakes118_8af1c24e8f293eb59c4e2184a8b6800f
Size
55KB
MD5
8af1c24e8f293eb59c4e2184a8b6800f
SHA1
3f00f347e5abae734bc0a12253bd0892830fc1f8
SHA256
fe054a3b9ac553c253937506a5deced8781a09dab22e04208148ec6aec8f0e99
SHA512
32cecec40afe14ae20fd2986271461cbe8a14bf7eadb094bc5d91f13adf3041d7b98585a97ddaec401cd547f4b02f372936fea5ceeef3034b2f2194212c944d1
SSDEEP
1536:UZ7V0LWtM6JxIb6Gb7tDHHcw499quJlP5:gkuM6JxU6KZBiTP5
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_8af1c24e8f293eb59c4e2184a8b6800f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE