DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Jobkmmo
Static task
static1
Behavioral task
behavioral1
Sample
48056aa0b395863e145040d0b8afbb81_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48056aa0b395863e145040d0b8afbb81_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48056aa0b395863e145040d0b8afbb81_JaffaCakes118
Size
793KB
MD5
48056aa0b395863e145040d0b8afbb81
SHA1
b1758fb2246ea5a03cf7339356da651767621f44
SHA256
5c94c42a6fa70420ff9502d866cdae2282bae80e68f4e43cdf9f116b0f311d64
SHA512
5c2daf9554569d8e9e6cf6e4e255386a41343541892a0e7981dfa5520a28ddc75486af78a31217f6893154f6c9705a37117801b8b636f620d3a25079e7d5e669
SSDEEP
24576:KYY292P1enshGxqEwxnLty6jrDf8foLO+3ex3m:KY3oIuHvjrDUfIO+uo
Checks for missing Authenticode signature.
resource |
---|
48056aa0b395863e145040d0b8afbb81_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Jobkmmo
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE