DllCanUnloadNow
DllGetClassObject
Oblnkkc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
adb522f8a9d477abc7f396d83e1cc997_JaffaCakes118.dll
Resource
win7-20240708-en
Target
adb522f8a9d477abc7f396d83e1cc997_JaffaCakes118
Size
725KB
MD5
adb522f8a9d477abc7f396d83e1cc997
SHA1
aabb85b30c6561ce6802b0e969b0c6999ea1cc8e
SHA256
59c50a3fcd0ffefbfd40d9eefa8f7958f1c7787e4c1c87cbea0e5bcadd6ba81f
SHA512
5005394251a0bc7e847b9d90750716f6b11b0fdf379e649b6bc2e6959f3b6958336aca791b46b275f519a0eb55d5418b1e78dc13e12bf3c578df2f6e2a44465b
SSDEEP
12288:54T2NB/k0wwGFUWI9ba835nbGM/9x6hsn2Bqw42jBAgwR1J4jpU:W2N1k0wtUZf35nbz/CsnpwpjBAg0/4j
Checks for missing Authenticode signature.
resource |
---|
adb522f8a9d477abc7f396d83e1cc997_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Oblnkkc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE