DllCanUnloadNow
DllGetClassObject
Fogckcp
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
d9a4860430efcd0baa9bf611d524e70b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d9a4860430efcd0baa9bf611d524e70b_JaffaCakes118
Size
800KB
MD5
d9a4860430efcd0baa9bf611d524e70b
SHA1
9ef689c4587e92e817ef2dbf5e03efc7e6817f75
SHA256
af58a9b003f36066d47987ad70608c55a62fea5e8cc05492ffd6b089be837205
SHA512
5bf04ca1d95a343974cf2605d9442c32953f2ea660b0a2f31339186a4179a5e281027811a12d560f0084f6448784f8394939dfbefa61f8852d68736dd750efec
SSDEEP
24576:VRcFLbZg2LQh1neYKwwAv0hGhLi8aH0Z:VRctq2LypwRGhLid
Checks for missing Authenticode signature.
resource |
---|
d9a4860430efcd0baa9bf611d524e70b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Fogckcp
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE