DllCanUnloadNow
DllGetClassObject
Coeeeco
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4b86837d76a28fec2d3cfc38a5014f27_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b86837d76a28fec2d3cfc38a5014f27_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b86837d76a28fec2d3cfc38a5014f27_JaffaCakes118
Size
791KB
MD5
4b86837d76a28fec2d3cfc38a5014f27
SHA1
c08d46e10bf44f768dbc623fb446b03fba4e9d59
SHA256
95c47d7673d97448c1aeb6c2033ed5fb4399b880e205685bcbdc7ccdc0f5f19a
SHA512
bef6c960099b975eddf549e5ec401b2156112771ebe6696fef68a808f6a981ef01083af621add476ac56228cff9ff21cee48547bb0b68041b3ef3c9073785b23
SSDEEP
24576:rWTWqM4h2/S4RNSQIX7dGD3CYyEQH0o+/Kgn:ST/aS4eQIX7dGDvyaign
Checks for missing Authenticode signature.
resource |
---|
4b86837d76a28fec2d3cfc38a5014f27_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Coeeeco
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE