DllCanUnloadNow
DllGetClassObject
Dgmodoc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
36678aa29440bbb7ed20e083f32194d7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36678aa29440bbb7ed20e083f32194d7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36678aa29440bbb7ed20e083f32194d7_JaffaCakes118
Size
101KB
MD5
36678aa29440bbb7ed20e083f32194d7
SHA1
5d7ecf929b94a70425b0c1ecbb671aaa949a66ee
SHA256
23cbfe9eb90bfe4f1dbcdb5dc5db77a743ac891fbef1a6003ea0b0ed35214cb7
SHA512
9c75c7df1498f34039c2a2fa642a821246ff0a203b85ae85a1a3c7421030e3bfb3d06cb42fc3378a0b64ceb49cdf27561db0a3e807fe504626bdcd179b97ae42
SSDEEP
1536:BIUUf38ZA2d+336J4GesExxRhsI4c99g9MOYGucMtFxhY/cAEPs6MnB242gVOmpj:BIXsZAT33IMxzh19g9huceFxCvH0Ns
Checks for missing Authenticode signature.
resource |
---|
36678aa29440bbb7ed20e083f32194d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryDosDeviceW
SetFilePointer
GetThreadSelectorEntry
GetProcAddress
SetConsoleOutputCP
AllocConsole
LoadLibraryExA
GetConsoleAliasesLengthW
GetConsoleCP
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Dgmodoc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ