DllCanUnloadNow
DllGetClassObject
Idankgl
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a573c34fefcb9fc620f020d7c788f499_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a573c34fefcb9fc620f020d7c788f499_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a573c34fefcb9fc620f020d7c788f499_JaffaCakes118
Size
101KB
MD5
a573c34fefcb9fc620f020d7c788f499
SHA1
93df17edac189cce572e96005b22b61e625df429
SHA256
25204308814103da887aaea753a15d857efedd1776acaf6cdd441ee69192a6ed
SHA512
e46387267f8d9fa51e659dbb64ac8f0c0e9a9af1f44b134a76492d49027ecd2a75ecf6448d8f9bec8dfaaba70973c394ee3472b2d6a2971831e8561f66076531
SSDEEP
3072:9U3ZYsAw9+e4VaPtDGdqrs0Q3qAP4idWGnhWl:2ek4oPtDGdkRQ6APX
Checks for missing Authenticode signature.
resource |
---|
a573c34fefcb9fc620f020d7c788f499_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReplaceFileA
VirtualLock
CompareStringA
FindFirstVolumeMountPointW
TerminateProcess
ReadConsoleInputA
LoadLibraryExA
GetProcAddress
RegisterWaitForInputIdle
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Idankgl
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ