DllCanUnloadNow
DllGetClassObject
Nononon
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4039937c633d3de86f4b8cac518ae673_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4039937c633d3de86f4b8cac518ae673_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4039937c633d3de86f4b8cac518ae673_JaffaCakes118
Size
116KB
MD5
4039937c633d3de86f4b8cac518ae673
SHA1
75d5a19cccf2c2684d205bb2db1d6eafff9dab2d
SHA256
2779b85eb970ba03ea474f56b98520e080dabcd0a081b1472e29c82684725478
SHA512
2d70c7412be08dc52aeb6d5e173ea8b9a88dd584d7933ead2b11ca52c3304040f493eb0af2cd2dc21df1e46acd53add04b8dd24936976ed870e0af736ec474e8
SSDEEP
3072:n6tQWzFWQBnd2pfcvw1eqaeLqySfmDu5Q3K05:n6yYs/pHMFpySODu8K
Checks for missing Authenticode signature.
resource |
---|
4039937c633d3de86f4b8cac518ae673_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CopyFileA
SetThreadLocale
GetVolumeNameForVolumeMountPointW
GetProcAddress
LoadLibraryExA
RequestDeviceWakeup
GetTempPathA
ValidateLCType
FreeSid
SysFreeString
CharNextA
DllCanUnloadNow
DllGetClassObject
Nononon
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ