DllCanUnloadNow
DllGetClassObject
Balkocl
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
163525b133d4b0912c48851c940b6520_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
163525b133d4b0912c48851c940b6520_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
163525b133d4b0912c48851c940b6520_JaffaCakes118
Size
101KB
MD5
163525b133d4b0912c48851c940b6520
SHA1
b610aa02d5bb887c5e64e8e38970656fbc1db256
SHA256
de74b1f7320bcb4dc022660e10601b57b18454df4bf5fdf912ff5794fcf3fd30
SHA512
fb24fc8c0c7bec92bfe28168c87d53bc2d857e3b409da249105c03f19e9c7b581ae8507b35ac782d0a45566fac3e375445c60ca7e0f47985db7b118d8d1f6cf1
SSDEEP
3072:RWeW3NhKhSzu/ZqNIYciXe/5jG3MaT9pcrFDNH:QxC8q/ZEIYciX2we5
Checks for missing Authenticode signature.
resource |
---|
163525b133d4b0912c48851c940b6520_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
SetThreadIdealProcessor
LoadLibraryExA
GlobalMemoryStatus
WriteProfileStringW
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Balkocl
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ