DllCanUnloadNow
DllGetClassObject
Hkccock
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b47c460ee2a63cc7870b42d6b80be618_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b47c460ee2a63cc7870b42d6b80be618_JaffaCakes118
Size
706KB
MD5
b47c460ee2a63cc7870b42d6b80be618
SHA1
9a4ce4dd31e38f9106cac3752787dbc5a2c596a0
SHA256
ce065395f45451883239f48094883752730a543e0819e45bcd0a9abee45b3f53
SHA512
d32f20a52e88db7e8173a990a5edf928a6779a83a052a137a888755cb947fcb32c16c6f987dc14b44bb35332547ca3e630dacb43a32518073236c7ca774d75d4
SSDEEP
12288:dpvcrpmLZKp32+aReKaHA45iMPIMizUV74oAyE+uLnzrKfSHZBe+jtIsLdjT9CDg:dFbKR2MbZiU1AyE+QvKfge+jtfJ9KxS
Checks for missing Authenticode signature.
resource |
---|
b47c460ee2a63cc7870b42d6b80be618_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Hkccock
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE