DllCanUnloadNow
DllGetClassObject
Ponlmpo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1a7ef02cd369beeb6ed1dbaf9f2aad47_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a7ef02cd369beeb6ed1dbaf9f2aad47_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1a7ef02cd369beeb6ed1dbaf9f2aad47_JaffaCakes118
Size
101KB
MD5
1a7ef02cd369beeb6ed1dbaf9f2aad47
SHA1
cd2005fa4328ca2819d750ec1d62ffc0e76bfdc0
SHA256
d9ce7778067db0ae5053d28ac44c2bcff38edb877276d9f3cc7060c8c5597aa0
SHA512
d98331d126ce020dc35f498ecaf84aae2873fbbdad1332380d07e4272b858af974e56d06ec1075ce6f856dab285e0060f02fd33ca4ced4d1ddef31a7ba5b0fd8
SSDEEP
3072:cih1G14brdIcFPVQqUAk8ePP/i+2xuvLQH:cih1Fbr9VRmPnMA
Checks for missing Authenticode signature.
resource |
---|
1a7ef02cd369beeb6ed1dbaf9f2aad47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
EnumLanguageGroupLocalesA
LoadLibraryExA
DefineDosDeviceW
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Ponlmpo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ