DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
432e31434fcb823efc14c7116f6e1bb1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
432e31434fcb823efc14c7116f6e1bb1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
432e31434fcb823efc14c7116f6e1bb1_JaffaCakes118
Size
775KB
MD5
432e31434fcb823efc14c7116f6e1bb1
SHA1
22fa94013eb67868eac13ee682e87855ac6fe76d
SHA256
22d0aff73c8d2c42cc429d2d499df2e19da315268e83976a1da1f01425bdbe64
SHA512
58dc921c7aa63f2f5f8eb160e2891cbb62533829ec896f6341626b89e9de03496ea42ea053cf1c65291147083de37756f8b8d945bae8d3c3f8dbe8f93fc384e6
SSDEEP
12288:HXGvpO3wenq6W7SPYhykc5KyiNicobVBDvo1t0MylQMLNRM9LjBuM3:HXGvgq6bAhncIyiUZb7BWMrM9L9u6
Checks for missing Authenticode signature.
resource |
---|
432e31434fcb823efc14c7116f6e1bb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE