DllCanUnloadNow
DllGetClassObject
Mknomlg
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
198ae036945dea72f939730e74fcc4b6_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
198ae036945dea72f939730e74fcc4b6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
198ae036945dea72f939730e74fcc4b6_JaffaCakes118
Size
100KB
MD5
198ae036945dea72f939730e74fcc4b6
SHA1
2a4cad3d274bb8fb729d6190ee863bdcdd7871b8
SHA256
f4e060f47e3f3f2e498b0a3a0d9d399ef71fbb6ed8e4a4d679d6f33a323698e6
SHA512
e674e9af03d667beeb6d2bafd0dad4ed28c011d919e990d74867350fb284983c949065efa00b9bb152527117169d58d782ac7514b3f51eecb6e568c7c2f0bb80
SSDEEP
1536:CcyrH/xbzMlaR5otSE1DkZqoOmZ5R6tCELqHSo28oCsDq2GLC+F3J1/:C3bIli5oQkDujrZ5R6tCXie2GLZx
Checks for missing Authenticode signature.
resource |
---|
198ae036945dea72f939730e74fcc4b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExA
ReadConsoleA
SetLastConsoleEventActive
HeapReAlloc
EnterCriticalSection
GetProcAddress
GetVersionExA
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Mknomlg
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ