DllCanUnloadNow
DllGetClassObject
Ncoomdh
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
408fe048b1a61b4ebe7a918ae0639645_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
408fe048b1a61b4ebe7a918ae0639645_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
408fe048b1a61b4ebe7a918ae0639645_JaffaCakes118
Size
104KB
MD5
408fe048b1a61b4ebe7a918ae0639645
SHA1
fa7afb3d34f30e31822276c84efd711a24a72fb6
SHA256
4d1fafca0e28f63887f37f7fc0b7a933dc8d1b0017f1cf4e0ebcd2565245f237
SHA512
fff8bf4f4c88293251820b63feb2ae71b875c73dfd4b22ec31095b0c951df474dde2e6b1ac16d45d404897e575159edc2dbfae324ffb1bc56e861bc5c811c1aa
SSDEEP
3072:MJNPYND/+AGREzfPPMFZ8KlOefD3fQY9vyuSjQd:MvY+AGaLPPCAefDYY9vy
Checks for missing Authenticode signature.
resource |
---|
408fe048b1a61b4ebe7a918ae0639645_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAddAtomW
GlobalFlags
GetProcAddress
GetOverlappedResult
CreateSemaphoreA
LoadLibraryExA
MoveFileWithProgressA
PostQueuedCompletionStatus
VerSetConditionMask
FreeSid
SysFreeString
CharNextA
DllCanUnloadNow
DllGetClassObject
Ncoomdh
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ