DllCanUnloadNow
DllGetClassObject
Nomhkdc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a9866d27ef92c3e0d66fb44765fb0c5b_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a9866d27ef92c3e0d66fb44765fb0c5b_JaffaCakes118
Size
703KB
MD5
a9866d27ef92c3e0d66fb44765fb0c5b
SHA1
06dc2103e5e9dd5c9453e4a4a09f334736772e46
SHA256
da477cbd96f32b4e2c0f9ffdbaf7bf7f1bd8723a108210dcc7c1f2687ff16816
SHA512
e9d1ac53ed0910306d43af32170da76dcb2c13336d364117618211d8e5d13f8c857e668a3414f20a2d7095a402b3fea3f0316970ff85396109737a78638d0cdd
SSDEEP
12288:c6JEYj++RMqx2719DdAGPg7Nv9herg6jvaIucELQr/tQmjoIGA1/I/H/qU:c6JEu++2qxuiwQgtAcEEr/pJGsKHC
Checks for missing Authenticode signature.
resource |
---|
a9866d27ef92c3e0d66fb44765fb0c5b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Nomhkdc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE