DllCanUnloadNow
DllGetClassObject
Ngnongn
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a7146b6fd629875b2dd678fe6976d8b7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7146b6fd629875b2dd678fe6976d8b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7146b6fd629875b2dd678fe6976d8b7_JaffaCakes118
Size
101KB
MD5
a7146b6fd629875b2dd678fe6976d8b7
SHA1
efe33dcd47e2b3db97b3c5cb1d62ff2555c2822a
SHA256
f227e675409508782396e18bb63dea7d1bb6225037cf3727011cc557fc5fc4f5
SHA512
df4ff0238173500d932ee09ea4ab39a01c73555b1f627a7091903f7c035499f90afccc4de505e2a90e03309abf2ca0a3ad706e12e8967291fc9bb4ae1bfa80f6
SSDEEP
1536:QoCsxITGjeKNpiOPtW/bEG/P+ThaI2k6weMQKZICWIQ1X+Ec6d7mdf5kBYXL5iZ+:5uHf73YEGU3pf5GLcZf9Pg
Checks for missing Authenticode signature.
resource |
---|
a7146b6fd629875b2dd678fe6976d8b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalSize
GetProcAddress
InterlockedCompareExchange
LoadLibraryExA
LocalFileTimeToFileTime
FindClose
MoveFileExA
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Ngnongn
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ