DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
397aa65f37d8e30a2c1a3de0636c0521_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
397aa65f37d8e30a2c1a3de0636c0521_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
397aa65f37d8e30a2c1a3de0636c0521_JaffaCakes118
Size
212KB
MD5
397aa65f37d8e30a2c1a3de0636c0521
SHA1
906dbb96e3c9d71edaa05a654eac44b398b67d72
SHA256
7f5116c6b7f92d0bcecaed1d035296bcac50913c1be8e76710d6dd44b5120383
SHA512
74f2557880499643a0d5fa8983ccd44ecb9bf357bd6e567fbde4173f47bb0355f8025c57af4b9ffb09b59f949a482d1fc54d45fbd93a2dceaf153eb13dc24b9d
SSDEEP
6144:P86h7HYu7Ovqe/6IcPT75iOfDUidszG/:P827HYu7OieTwv5Jldx
Checks for missing Authenticode signature.
resource |
---|
397aa65f37d8e30a2c1a3de0636c0521_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteAce
AdjustTokenGroups
CloseEventLog
CryptGetHashParam
CryptSetHashParam
DuplicateToken
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
HeapReAlloc
InterlockedDecrement
SetFileTime
ExitProcess
MulDiv
GetModuleHandleW
DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE