DllCanUnloadNow
DllGetClassObject
Nononon
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
380679695df7ff7500cb08ad704517b7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
380679695df7ff7500cb08ad704517b7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
380679695df7ff7500cb08ad704517b7_JaffaCakes118
Size
117KB
MD5
380679695df7ff7500cb08ad704517b7
SHA1
7976d4d2b9b8a3a8afe838665e9602c43df81ac2
SHA256
773ddc5b21af38537b04e79bc308af9a23ca58ab7160b85585590a5b63d491a6
SHA512
3ed7f76a75a903620d3143060b18325e195c3130655dac74eb5971b3f4f2246001a049ba0d36240e862bc386c056d984c1d88b2f26d4c38c275856e36a7afa73
SSDEEP
3072:FhEag++krZKm69EDoh1bIqBqr5u9iDd2gYXPkJrsH:/j+krP69aQYu9gEf
Checks for missing Authenticode signature.
resource |
---|
380679695df7ff7500cb08ad704517b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteConsoleW
Thread32Next
MoveFileExW
GetProcAddress
LoadLibraryExA
InterlockedExchangeAdd
FreeSid
SysFreeString
CharNextA
DllCanUnloadNow
DllGetClassObject
Nononon
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ