DllCanUnloadNow
DllGetClassObject
Nobecko
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
73e138bd0a00976073b067b5117ff80c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
73e138bd0a00976073b067b5117ff80c_JaffaCakes118
Size
794KB
MD5
73e138bd0a00976073b067b5117ff80c
SHA1
3522b263aafbe41024d64184720769c3147e6e3c
SHA256
52547ed1eb586626fb1d35d8c68a570d72cdaafa45874e93c05f455a403338aa
SHA512
1a9758a1e869fe778c16cb07e15e8587a32eb07dc500b179184605c37498aef5fa7779d9db29532cf0bfd85fc611d925a84a57ac81d2f0b3a114bac634c92fe0
SSDEEP
12288:AKdiQih1N5qDY9wnsg9gi+q/pNM3qdi52HYrPUVgA9mYBUo1y1c97HawXngFq:AKXaL54rfQ6JePNN2k1ch3D
Checks for missing Authenticode signature.
resource |
---|
73e138bd0a00976073b067b5117ff80c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Nobecko
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE