DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Omknckh
Static task
static1
Behavioral task
behavioral1
Sample
ef32f325261b9d406896304bb4f62b31_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ef32f325261b9d406896304bb4f62b31_JaffaCakes118
Size
782KB
MD5
ef32f325261b9d406896304bb4f62b31
SHA1
a91adcbb3d5fb5c78e15134a7aa6e4cb0d16db8d
SHA256
285fd1bd01e7a265fda4fdc1b9b5d23bfdf0a15f3d174857695e6ddcc494f839
SHA512
6055ae6cce8e46b9f85b90d6f25dd961d66fd93a4d69bc3482799eef4daa81378a115c9c6fc7cd48b23e3bc1261c1f9417f52a9d99bf9dabe4308d0bd8aa1853
SSDEEP
24576:FCaaDKOqKhWxdW20ket0//tR3JBu4/lQKe:FTsqKYGb+b6SQKe
Checks for missing Authenticode signature.
resource |
---|
ef32f325261b9d406896304bb4f62b31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Omknckh
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE