DllCanUnloadNow
DllGetClassObject
Ihglkna
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2d2e08a786ac0c4acd71151cb56d00f6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d2e08a786ac0c4acd71151cb56d00f6_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2d2e08a786ac0c4acd71151cb56d00f6_JaffaCakes118
Size
99KB
MD5
2d2e08a786ac0c4acd71151cb56d00f6
SHA1
556cff11b5c13cef0927cb59ec41bb757b9a25a6
SHA256
20eda46a3f5ffaab7b7920cf356b6e56d3598689a59afeb51f2a1fc858aa44fc
SHA512
e9e5a467e67f2262b18b1614809e88f31047b26487dfbea06bc07d72fed5daf1267ac56a7cffd7584bcc22b42262a4ceb37268b502f8a39dcb6de858e6a39505
SSDEEP
3072:HMEmuGbfndl1+/r6XC6zDwktzYevI9TPFkVSG:HMvjnn7VHpzi9Tdy
Checks for missing Authenticode signature.
resource |
---|
2d2e08a786ac0c4acd71151cb56d00f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenFile
SetEndOfFile
GetProcAddress
LoadLibraryExA
IsValidCodePage
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Ihglkna
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ