DllCanUnloadNow
DllGetClassObject
Momomom
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a35eaa1544bc6c5dc508395376130442_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a35eaa1544bc6c5dc508395376130442_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a35eaa1544bc6c5dc508395376130442_JaffaCakes118
Size
100KB
MD5
a35eaa1544bc6c5dc508395376130442
SHA1
d4d3a42c86594a41c73344aefefe1d5fda926d9c
SHA256
59de39730a795f757c7f867694ad6dcd0189fa86ddc899f55d58f2cd1f77c68b
SHA512
b22332cda8dbe9d88eb7423e634ffcd2343950776f4c56d0e193b9864c764ab281a8ef3b442211c087158e1016137f134def8ee2d36e9a1ba9a75cfb47bca6b5
SSDEEP
3072:Uy1tATQa57RE/7ggtOJSOhDwOqFe/N4ajdVJZ//0n1vv2:DtoVRUggtCSOhDw7F0N4idVfm1
Checks for missing Authenticode signature.
resource |
---|
a35eaa1544bc6c5dc508395376130442_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExA
GetProcAddress
Module32NextW
GetFileSize
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Momomom
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ