DllCanUnloadNow
DllGetClassObject
Omkncon
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
8ec03be299dc17f43af1928c651c7473_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ec03be299dc17f43af1928c651c7473_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8ec03be299dc17f43af1928c651c7473_JaffaCakes118
Size
97KB
MD5
8ec03be299dc17f43af1928c651c7473
SHA1
4684aabcf75d02de817ac5f199563a49c01d09bc
SHA256
e4db6fa248b66a11e13635c7b5bd52787672b20c56a2416db65b8fffe57e3d06
SHA512
df89be401652660fccaf4937cf7e4abdb2a13501bc38b6d1bf8489eb5c84025cbb151b1111d3274cb97f5965487230cef6efde86af29a9615e145829115115a2
SSDEEP
1536:v/doSTj65q//dfjytuNZ3t3etnVBc3wNiyPasYClEvq5Le:v/d5TjNNz3I9ioajMwq5Le
Checks for missing Authenticode signature.
resource |
---|
8ec03be299dc17f43af1928c651c7473_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
RegisterWaitForSingleObject
EnumCalendarInfoExA
LoadLibraryExA
ScrollConsoleScreenBufferA
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Omkncon
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE