DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1650c0ae9cc45bffbc42e62e17c1bd3c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1650c0ae9cc45bffbc42e62e17c1bd3c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1650c0ae9cc45bffbc42e62e17c1bd3c_JaffaCakes118
Size
79KB
MD5
1650c0ae9cc45bffbc42e62e17c1bd3c
SHA1
86e6072f28b15aedea5378f7fc333fbe070644ad
SHA256
690385feec7b102bfc78aa749737f74f01600148f003ac4745ca7157581333b6
SHA512
88f665559ae8a07c564479a2c7440710949a065362a8c5ded3ce176a8f70934621a05177779bbe03139bf8ab45cd9cd05100a4968737fc371c890fe00b6e745c
SSDEEP
1536:G0wZ7Q+RhfWjIYGaJ0WRDYHq8kiiFXv1+zv/uy7U+Qj5Bg/GuSS3DuQbc:G0a7Q+GjDDJ0WRDT8ZiB1+zv/uy4+Qj
Checks for missing Authenticode signature.
resource |
---|
1650c0ae9cc45bffbc42e62e17c1bd3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
OpenEventA
LoadLibraryExA
GetProcAddress
LeaveCriticalSection
FreeSid
SysFreeString
CharNextA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE