DllCanUnloadNow
DllGetClassObject
Ikddgbi
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
30aa8aaa02a5a1ce68fddefdc978a85e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30aa8aaa02a5a1ce68fddefdc978a85e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30aa8aaa02a5a1ce68fddefdc978a85e_JaffaCakes118
Size
804KB
MD5
30aa8aaa02a5a1ce68fddefdc978a85e
SHA1
29d681efa73588723d4a94bb4280d9820c767d81
SHA256
56fffdb5980a8d8dff18c45dea4bcdf7ccce8772abbe4533cf915a0399b5ea25
SHA512
83d8a9ca66d63d6b6cbe654cc8b7162a94d7e155ae7e5f10c34932567cc45dbb9f6a76fc31f8f55f613e53391e971252fa221880f3a6daf6a2f5f87783f8b74b
SSDEEP
24576:ciOkswvk1acSCsqod7mTdv5Y5VSr4W5PWy46fe/k/IH+r9:c1kpkdShqQmDYuZ46fXgw
Checks for missing Authenticode signature.
resource |
---|
30aa8aaa02a5a1ce68fddefdc978a85e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Ikddgbi
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE