DllCanUnloadNow
DllGetClassObject
Confocp
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
15f9a24f8b12987903e06ba720cfe7a4_JaffaCakes118.dll
Resource
win7-20240729-en
Target
15f9a24f8b12987903e06ba720cfe7a4_JaffaCakes118
Size
800KB
MD5
15f9a24f8b12987903e06ba720cfe7a4
SHA1
b00219365d52e65bcf14cac17433f29c3f30fa53
SHA256
c47d01c195bbd457775e366a3f3c93287a50bbe3d6a5ee82654b008964ed1c05
SHA512
34a52e8b7f307f889d375bb18923edea83c11933c14004027745cfebb5bf27bf055757c59c5c67e561cd708d7f5160921daa625b2070358c8d70012f0de23991
SSDEEP
24576:2RcFLbZg2LQh1neYKwwAv0hGhLi8aH0Z:2Rctq2LypwRGhLid
Checks for missing Authenticode signature.
resource |
---|
15f9a24f8b12987903e06ba720cfe7a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Confocp
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE