DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f04ce0331f064a16018ee9c622a4be36_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f04ce0331f064a16018ee9c622a4be36_JaffaCakes118
Size
801KB
MD5
f04ce0331f064a16018ee9c622a4be36
SHA1
2a8146d8074d71bd69cb9bf3c09fabe26a766cf3
SHA256
9215205bf2110c0bff871a5da1194263da48b70cc84dd97ba92a6a6598fc4eb3
SHA512
7e62f416b81e5fbc2624deacd90228733ba027d8adce616ffe7ed57d75d0315f760c561d3b4c316db3a22626f737b9bd4e7a0464cfee0ab52173c15a2a195af1
SSDEEP
12288:W0jHG8SY+I2D2gMXNUeiCYUjcVyQb5A2h5k7y+XYjU2TzFh6KG2HrhYGQRl:W0s3yVy4y3nPayaMUOzL19NQn
Checks for missing Authenticode signature.
resource |
---|
f04ce0331f064a16018ee9c622a4be36_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE