DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Hpcpmco
Static task
static1
Behavioral task
behavioral1
Sample
2da635d43459f79bd4ef79318284e3fc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2da635d43459f79bd4ef79318284e3fc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2da635d43459f79bd4ef79318284e3fc_JaffaCakes118
Size
805KB
MD5
2da635d43459f79bd4ef79318284e3fc
SHA1
39318dd28fa4e2a7a5857000251dea6688485ef8
SHA256
62e271d0b02f208a23f5d6ffd2b75a990038765d9965d6a56c80c3e7c3ac00cf
SHA512
6e5bddc9a85d6f107e3035246b5ebe5afb6dee7374b30442addbae667d00ed5f1399efd19711d48287682e85028a1c6b14920e79df0d4367853966a4d33b870d
SSDEEP
12288:us7PZMQhtCUyK2TK7kYFm3Z6xBRQeyyGC14yYm48t8rcYhI/JPK9JKOqLBZ9:ZPZFtCUaTU1OQ5y21xAccI/ecOe
Checks for missing Authenticode signature.
resource |
---|
2da635d43459f79bd4ef79318284e3fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Hpcpmco
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE