DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Nkbbgnk
Static task
static1
Behavioral task
behavioral1
Sample
3fe6294a82e482a9166b372093992d76_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fe6294a82e482a9166b372093992d76_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fe6294a82e482a9166b372093992d76_JaffaCakes118
Size
793KB
MD5
3fe6294a82e482a9166b372093992d76
SHA1
712c81f4f6cbc83be4a2da930573c84b5e63bcad
SHA256
9a0bdc6b00a52a15b3e5aa2d524b5712370ea72049cd3922d5722a2c20230738
SHA512
32791421f5ee31c4e9e5349df56c17f637e15b16eef74982d54ecd87856122cf150df7d4c9451ca44019a52f946625c60194cac25bb88ae834495b6ae0ca0fb2
SSDEEP
24576:KYY292P1enshGxqEwxnLty6jrDf8foLO+3ex3m:KY3oIuHvjrDUfIO+uo
Checks for missing Authenticode signature.
resource |
---|
3fe6294a82e482a9166b372093992d76_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Nkbbgnk
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE