DllCanUnloadNow
DllGetClassObject
Lkmelap
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b7b83b1c2d93bd186ff9676120fe82d3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7b83b1c2d93bd186ff9676120fe82d3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b7b83b1c2d93bd186ff9676120fe82d3_JaffaCakes118
Size
100KB
MD5
b7b83b1c2d93bd186ff9676120fe82d3
SHA1
e520b8d2934a4565f9cb731d547ca07fe8a4419b
SHA256
14ca861b090b34a7ec530cd9fa56de5beaf73dca412d9af88c521e6316f976d2
SHA512
de30d232b5c2a33c6a8933281fa67c65e9e497ee275165230ae7c546e8490fcc4fec148e92a64cec13bd5e424a4dd77d60fdd95977af3aa227e9b876c00c5683
SSDEEP
3072:+bhBW/ly1Vu8NyYClYfnel9iyEUnI1Ke:+bhEAK1AejZt
Checks for missing Authenticode signature.
resource |
---|
b7b83b1c2d93bd186ff9676120fe82d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Toolhelp32ReadProcessMemory
GetProcAddress
GetTapePosition
LoadLibraryExA
ReadConsoleOutputA
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Lkmelap
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ