DllCanUnloadNow
DllGetClassObject
Nolonol
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a03c3c25da07865b25fcbd238ae3b9c0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a03c3c25da07865b25fcbd238ae3b9c0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a03c3c25da07865b25fcbd238ae3b9c0_JaffaCakes118
Size
103KB
MD5
a03c3c25da07865b25fcbd238ae3b9c0
SHA1
1c5df7af1c72339d441ac8251cc581d8ba0fa232
SHA256
b664857493b54fdec71f8779c10449493d6603e3f6160ca2bea5f9ad01b99cf2
SHA512
07894bd62fef11b0806e701c16db3759eae21c46e17946b6a6952329d48eda961a54abf154b4e9638c4ba198f3a784a381a180444971ad16c489f7369a29b02a
SSDEEP
3072:TxwInxkGb2uc6H7mqYnqHUXPG8qjB4hQ:Txrxk02p6H7h
Checks for missing Authenticode signature.
resource |
---|
a03c3c25da07865b25fcbd238ae3b9c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetExitCodeThread
LoadLibraryExA
IsDBCSLeadByteEx
GetProcAddress
GetConsoleHardwareState
FreeSid
SysFreeString
CharNextA
DllCanUnloadNow
DllGetClassObject
Nolonol
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ