DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Ngicpmn
Static task
static1
Behavioral task
behavioral1
Sample
8dc220d9b4d2c1871627d5dbf34f1c6b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8dc220d9b4d2c1871627d5dbf34f1c6b_JaffaCakes118
Size
791KB
MD5
8dc220d9b4d2c1871627d5dbf34f1c6b
SHA1
ae75716ceaf50e60daa3faa335dee4b4bb80f428
SHA256
53487547af750c9b525fbfe67cefd8a6c9bbcf333feaead12bce06ac795acd38
SHA512
ed837fc74f44b56a532e096775bb2bfa86c7aeaf1ea43789c39f94f0b118f0fd7f570fa4f77d4d6119782ad091e870e5418a8e1acb3097b8cf3985023a74a1ac
SSDEEP
24576:3RpNJjMUxuU0QloDzxgeF732uORLqwZ6M71SFuZh:3RpNp5xeQ6xgcLo9YM71Mu
Checks for missing Authenticode signature.
resource |
---|
8dc220d9b4d2c1871627d5dbf34f1c6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Ngicpmn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE