DllCanUnloadNow
DllGetClassObject
Momocki
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
5ae0291b2017e15e916eff0f7e0eeafc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ae0291b2017e15e916eff0f7e0eeafc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5ae0291b2017e15e916eff0f7e0eeafc_JaffaCakes118
Size
101KB
MD5
5ae0291b2017e15e916eff0f7e0eeafc
SHA1
e41ae1d739988422c6f7e01209a7cb9164a8c62b
SHA256
ae2d4e30fc3662f519ae2925344287801f0ff78d1d92e9ca29e47daf61e37776
SHA512
7205c0cb47dd158985f613ef67fa20d332d9d45236569e8b7666bf9617456ac25477905e7acbf13bc73b4f5db2ca89853a689470a8137bd6e93b5cd52216840b
SSDEEP
1536:HD2WgET4Ab/oO6Zk1Hs4MyqiMRl+RoZax3/FYYK7/+5U/DKQnAVUE6aVaA4kskmQ:jlcAb/6CM4IhqHQ/K2AxRf3rX
Checks for missing Authenticode signature.
resource |
---|
5ae0291b2017e15e916eff0f7e0eeafc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalReAlloc
LoadLibraryExA
AddAtomA
GetProcAddress
ResumeThread
CreateProcessInternalW
MultiByteToWideChar
GetVolumeNameForVolumeMountPointA
GetCompressedFileSizeW
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Momocki
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ