DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1ad0d33ef6bbfbe71e846a725a0daa78_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ad0d33ef6bbfbe71e846a725a0daa78_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1ad0d33ef6bbfbe71e846a725a0daa78_JaffaCakes118
Size
90KB
MD5
1ad0d33ef6bbfbe71e846a725a0daa78
SHA1
9485522747df8e54adc9531d6cc6de7fab4bc662
SHA256
19908be6f4714a401708241cc432a99376820d6ff6c0e2a64e59d5deabece5ca
SHA512
9af7bfe7ec9149592a01f57faff32463ac55222c289162088d723baf7ee15f61567e257150775f7520aad195271b58489303a712f5b9b19150a9cf90f7a5dd76
SSDEEP
1536:y942wz/HjNUkpwXhhhr55PZATFL0kRNCDXiT1y/FuR7A8YMuiFzqz56zWhWvMv:yu+kpi3hr5rOJEXiT1yQR5YhOzqz8gWk
Checks for missing Authenticode signature.
resource |
---|
1ad0d33ef6bbfbe71e846a725a0daa78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
FreeSid
SysFreeString
CharNextA
VerQueryValueA
WSAStartup
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE