DllCanUnloadNow
DllGetClassObject
Gakncni
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
06d62a2b736fdfe86e518f21d5349a83_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06d62a2b736fdfe86e518f21d5349a83_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
06d62a2b736fdfe86e518f21d5349a83_JaffaCakes118
Size
100KB
MD5
06d62a2b736fdfe86e518f21d5349a83
SHA1
83fa4ef5c2a460656a41c85ff44c9bc94a841591
SHA256
1552ae0b67912760de8ab3c40ecf460a46be142451145e9dba76b8bb83930e1f
SHA512
f9a2535c1247a93ccd65f6ea71b16c953439667fe1060473005a8bf64d746cc6aa34cc11d444355ef5045af30d198a1335758dc5bf029b72c1b51bb1562d7396
SSDEEP
3072:+tnXIdbDRkY+cVYP0vmd8dhmQUb3ge54J0f:+RIdbVkY+4YP0A8ED7uJ0
Checks for missing Authenticode signature.
resource |
---|
06d62a2b736fdfe86e518f21d5349a83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
UnregisterWaitEx
ChangeTimerQueueTimer
Module32Next
CreateFiber
LoadLibraryExA
GetConsoleWindow
MapViewOfFile
GetProcAddress
QueueUserAPC
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Gakncni
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ