DllCanUnloadNow
DllGetClassObject
DllInit
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b8e7aeb2b6a932c84942512adb683c3a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8e7aeb2b6a932c84942512adb683c3a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b8e7aeb2b6a932c84942512adb683c3a_JaffaCakes118
Size
100KB
MD5
b8e7aeb2b6a932c84942512adb683c3a
SHA1
e57ef5167ce3e41f18ae53860f776201c10297fa
SHA256
2e39955a7f251fc397b79e9987c411e674ad7e82ca950d071667284e995242d4
SHA512
d546daf9ef4a1695b6e08e64bda59d1b0071dec117f0722403ef156c7b2b745a5da1dd568532df1e7f8092cb35a73e1a8cf31ec02075a887e9d18878f9bbf867
SSDEEP
3072:B5QfJ96kCd9O8u75Q+NH/RoDDzX4k0IUPZT7X:Baff6CdQ+NH/GDXXIDJ
Checks for missing Authenticode signature.
resource |
---|
b8e7aeb2b6a932c84942512adb683c3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SleepEx
GetProcAddress
LoadLibraryExA
TlsSetValue
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
DllInit
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ