DllCanUnloadNow
DllGetClassObject
Efhfihi
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b369b08ad821bef950cad5a07c8e8f10_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b369b08ad821bef950cad5a07c8e8f10_JaffaCakes118
Size
722KB
MD5
b369b08ad821bef950cad5a07c8e8f10
SHA1
104d45daba5fb0b17d0c31eb685638aa8cf2637a
SHA256
dfca7c37699c87f5417bde4f12ddd60bd12af5e8c2136d560b81051538ed72e5
SHA512
ab874e401e3e025ddef11e82d56b395ce5f05c10477721b49303504dcb8ac91ece63d266f6d34fd97ad73b3ec21fb458e53be80c11b50b48769a531fa55fe2f2
SSDEEP
12288:+GkKmIHLYCaWpXzU4fE1d1xs0Yfv0zAWFuhlCXRbmqky4mbdJ2I3ZvY59OhOuB41:BmcNaWpY9AWoyXFmqk3mb7JvY59O0uB4
Checks for missing Authenticode signature.
resource |
---|
b369b08ad821bef950cad5a07c8e8f10_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Efhfihi
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE