DllCanUnloadNow
DllGetClassObject
Moionci
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a4713973f9a1046bb4b9247a520ac154_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a4713973f9a1046bb4b9247a520ac154_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4713973f9a1046bb4b9247a520ac154_JaffaCakes118
Size
101KB
MD5
a4713973f9a1046bb4b9247a520ac154
SHA1
e4b5db37b81dfe11967a971bfec909d607270bc7
SHA256
0dd531a4aa9bc6f6db0167ed4631913607db7489b433f92cbf2487a00796a57a
SHA512
84cc9350d7e787ecc12bfd9b8413a410bc05494d4b9c77b36992a30e70aeab099928ecf3820f874692e8d2f29d4f526ac7e9af62b344a56d8d3656b85d8da561
SSDEEP
3072:VRY32/l81dMLmPI3pVn2cCt8nouIufoMJTnnAG4QY:VR8dMUKpVn3k8o0foMJDA
Checks for missing Authenticode signature.
resource |
---|
a4713973f9a1046bb4b9247a520ac154_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExA
GetProfileStringA
RtlMoveMemory
GetProcAddress
SetConsoleLocalEUDC
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Moionci
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ