DllCanUnloadNow
DllGetClassObject
Cencjok
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
bb8b82556abdb1717bd5b9548e16fb9c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb8b82556abdb1717bd5b9548e16fb9c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb8b82556abdb1717bd5b9548e16fb9c_JaffaCakes118
Size
101KB
MD5
bb8b82556abdb1717bd5b9548e16fb9c
SHA1
84e93322ff8de0aec1170e84fbdf3e1913247996
SHA256
c899b7d4249b311f834e2d9d39bd7f782816611c8f7d99ac2fedcfacaf1ed1fa
SHA512
61a34f122093d9905c7d45a7c1b0154cd8437abfb637f35911218d5d024d1f5c4e0e79ce95f0d21e750dbcba0e94d45ab68374494abfd087469288a49a11c7ac
SSDEEP
3072:yB3K97KcKHSs17w03VLy4xRWMJNbvqV8EUaYj0E/+:Ea9WcKHSh0xRWMJNbK0
Checks for missing Authenticode signature.
resource |
---|
bb8b82556abdb1717bd5b9548e16fb9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalCompact
UTRegister
VirtualQueryEx
GetProcAddress
SetLocaleInfoW
WriteFile
LoadLibraryExA
VirtualProtectEx
EnumLanguageGroupLocalesW
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Cencjok
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ