DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
WLEventLogoff
WLEventLogon
Static task
static1
Behavioral task
behavioral1
Sample
02e13df88fffdbefdb4cb4ca1d3fd760_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02e13df88fffdbefdb4cb4ca1d3fd760_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
02e13df88fffdbefdb4cb4ca1d3fd760_JaffaCakes118
Size
78KB
MD5
02e13df88fffdbefdb4cb4ca1d3fd760
SHA1
6a508ffd3903df608f2aba2247641244562111f8
SHA256
f04ebfd6271df2046a1d822ac9da069a7873d2a072489dc046cf1b08dcf52a74
SHA512
84db7d4c0a7c050d7e794a61567fbb81282ddae227b47596342d628d7d8755b8459afd2ba925bec7886873e3026996c50c9c3b972abe384a68d9e54df16652cb
SSDEEP
1536:rnAwFaV68ASHITgy58AB736TfZsoiDO8gMXAa2Zl/enl4PSLn/gfWKvZ:LAwopoB58Ap36TZaOrMXaBpPSr/g
Checks for missing Authenticode signature.
resource |
---|
02e13df88fffdbefdb4cb4ca1d3fd760_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
FreeSid
SysFreeString
CharNextA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
WLEventLogoff
WLEventLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE