DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Gakmkjc
Static task
static1
Behavioral task
behavioral1
Sample
5e92e3c43243a924236e369d12adc5eb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e92e3c43243a924236e369d12adc5eb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5e92e3c43243a924236e369d12adc5eb_JaffaCakes118
Size
803KB
MD5
5e92e3c43243a924236e369d12adc5eb
SHA1
cfa810ec7b4f022f94d30e2e9e2f5c9bd3ce9d71
SHA256
5992c641c7cdd9dd43ccea4f29bde2181abce642006e3e1fbab03e748ed1d192
SHA512
d4f19337d16eca07a01f915f46f02ab5eec56813b48e95e7323493b7f8e8a1aa6f07e46549d8e2ef521a55177b9f6a1c00c9a814dd28885006b16162ea911943
SSDEEP
24576:ENTjluBFL47h+leHR1xNz7c56UQWIq98WtJegm0:ENTjYz/lWRj2R9DtJes
Checks for missing Authenticode signature.
resource |
---|
5e92e3c43243a924236e369d12adc5eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Gakmkjc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE