DllCanUnloadNow
DllGetClassObject
Hpcpmhp
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3301776122048bad1a6a832ea4919147_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3301776122048bad1a6a832ea4919147_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3301776122048bad1a6a832ea4919147_JaffaCakes118
Size
98KB
MD5
3301776122048bad1a6a832ea4919147
SHA1
833ccdfa7ef6f83a43c3a27f69a40b3cb309ca2a
SHA256
a68eb2bcf44f6d949ffc49c6db92c11f1489e5c2d3d418a8451b6c91c3c1a9ce
SHA512
724395835eae58b12f1579d89a18b62cb2f0f8477f09609a134a36da2339d271340b7cf52874306df7685cb1a09b11e0b15e3e0986a339d980aa40806dc3200b
SSDEEP
1536:l0M+nDS4K2xiHDvYbJdQFXvZgIiP4pV1W41Ha3vclYcux5y537HCi:XKu4K2xoEMFXv+I1W4Va3vcBuC+i
Checks for missing Authenticode signature.
resource |
---|
3301776122048bad1a6a832ea4919147_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Process32NextW
GetProcAddress
LoadLibraryExA
WriteConsoleOutputAttribute
Module32NextW
GetHandleInformation
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Hpcpmhp
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE