DllCanUnloadNow
DllGetClassObject
Famkcpm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
728980b1badda28adb83ad4556138ae4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
728980b1badda28adb83ad4556138ae4_JaffaCakes118
Size
716KB
MD5
728980b1badda28adb83ad4556138ae4
SHA1
b74bbc665e72d38349bbd2f0b226e787b6a3047b
SHA256
0c7b829aece41a83b6dfb47907856e0f182cd9525f029776d3f5ae32ee6a8aed
SHA512
0fe4cf79f6eba896ec0a09ec9267932c318bfe8df2f153fe8ff967671e35d9e1493a178613f2052b3ec31f9d0a2156e540d584ccab51c4e27bcee42c25419c41
SSDEEP
12288:OGSJcxBgDr1Sh+tPkUcNNZl2DuZ/8jPqBzDDKZ5+g7mkTm:OGSJ1DpY+OUcNNHuuiiBjcmkq
Checks for missing Authenticode signature.
resource |
---|
728980b1badda28adb83ad4556138ae4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Famkcpm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE