DllCanUnloadNow
DllGetClassObject
DllInit
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2b93f2f086cb2d2c289756bef88ed60d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b93f2f086cb2d2c289756bef88ed60d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b93f2f086cb2d2c289756bef88ed60d_JaffaCakes118
Size
100KB
MD5
2b93f2f086cb2d2c289756bef88ed60d
SHA1
817e64b0c99f0d4a3b31911500889c4692c13aff
SHA256
4d63c64958adebea449ab96248f24ab9acc04ec6e99f6cbece8898b2b2cfba87
SHA512
f928d754fa0a63818b4b4dc1bf06d132e78eb71590cb8eccb2d405a3f4308288463133db6ae2a2204b7639953c6ea7fa49c7e5eb1f05c3adaed226479969f792
SSDEEP
1536:+m6umQm/lpkI2V+N+EWiEPRhlYn/N/xt+VWia2U12A2ac7flriE3QewkP+t0X+h:+ux4kdV8+7NRhl8DtAWian5cjlH2ktu
Checks for missing Authenticode signature.
resource |
---|
2b93f2f086cb2d2c289756bef88ed60d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryExA
GetProcAddress
ReadDirectoryChangesW
GetCurrentDirectoryA
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
DllInit
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ