DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c17c23c0b8fd4e9c843aa22f94e4c5d6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c17c23c0b8fd4e9c843aa22f94e4c5d6_JaffaCakes118
Size
784KB
MD5
c17c23c0b8fd4e9c843aa22f94e4c5d6
SHA1
790b0ce4febd2e4502d3dac9835e489e2cfb13d9
SHA256
5b5e1dafd0c81794338f30207f92ed6d46cdc47c2396b5d9224a9c6bec886cd6
SHA512
67c1e1c5c28aba6c1d7dbf94547f6f3efff0c89211c61d56ed240b4c3c63e65ac402522ebbe0f41d4d82489e52b5048bfe35604bb71e3cbfac686c7d332954fa
SSDEEP
24576:fRYTRHwfFBq/QoVGEKOZN5EcYBSCJfzTAo:fl6mEKODhQbE
Checks for missing Authenticode signature.
resource |
---|
c17c23c0b8fd4e9c843aa22f94e4c5d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE