DllCanUnloadNow
DllGetClassObject
Olngobo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
695d89b20ed192a66650b5395818c9e2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
695d89b20ed192a66650b5395818c9e2_JaffaCakes118
Size
805KB
MD5
695d89b20ed192a66650b5395818c9e2
SHA1
2354e9e85162507361e6d3e2147834b5b2c9aadf
SHA256
812b3966be5092cb688ab164074e29eb4e3f2c08d18df1be5014d346ec15ae0b
SHA512
36a4b3646444e90e4299ce6aca2e14924ae8ab0c32af913a5fe768675836370577f603777eaed3dc6b99961c4bcc5498c83de976172d1380a4745a50d9ca5da4
SSDEEP
12288:F6YFaDYwGlVQ1izXNjeundfsn6YpHDwmkftq5Syc6iNlp/7vVUZjH5cgr:wYIDYwAQ1SXNts6iMfU26iNvr+5HV
Checks for missing Authenticode signature.
resource |
---|
695d89b20ed192a66650b5395818c9e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Olngobo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE