DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
WLEventLogoff
WLEventLogon
Static task
static1
Behavioral task
behavioral1
Sample
4c70147a7869198f6ad802b49d340e73_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c70147a7869198f6ad802b49d340e73_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c70147a7869198f6ad802b49d340e73_JaffaCakes118
Size
78KB
MD5
4c70147a7869198f6ad802b49d340e73
SHA1
6e35ae946831e64f5a9b910315ca97a719e17f48
SHA256
78007b526b7128bddcf122c2235959e36daa759d6b4e6a3bbe05b52c3ca78738
SHA512
a8a40408c2403fe08d88c56f167fedb073da06e080005b5fc286baa53298d4e61672eb0751014bcf909771217df1a9bb6beaf4c84d575baf9fec10df18b01872
SSDEEP
1536:qhkkDaCEGQzbzM2ZLnzab/jYLdN4jJ7VqLx1ul2u99rBf3+ePz24Zt8m:qukDVqz/Zq/jY/4CtIl1rBf3+ePC4ZT
Checks for missing Authenticode signature.
resource |
---|
4c70147a7869198f6ad802b49d340e73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
FreeSid
SysFreeString
SHDeleteKeyA
CharNextA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
WLEventLogoff
WLEventLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE