DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
0419b92062e3f14a128220421328b658_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0419b92062e3f14a128220421328b658_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0419b92062e3f14a128220421328b658_JaffaCakes118
Size
60KB
MD5
0419b92062e3f14a128220421328b658
SHA1
04951be579052c9507e0a6c722bd43f6fe00ae05
SHA256
3f06e7f06449865c7d9886c92f10990b2e759c090db2ab287fb1524ca17fb141
SHA512
b1e40863419247a76d96056c6035ae56681dde397def102fc13c526c32afc4a27d9c8b8239225af9fc401eec5ea1060dda4653f2d3073ec991b77615d984bc20
SSDEEP
1536:DVmovV3LWAxkjM9rh6jKHL3wCWVbzEB+QC:oo8BjMdJzw1VbzMC
Checks for missing Authenticode signature.
resource |
---|
0419b92062e3f14a128220421328b658_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoInitialize
StgOpenStorage
CoUninitialize
GetProcessWindowStation
GetUserObjectInformationA
CloseWindowStation
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetModuleFileNameExA
_adjust_fdiv
malloc
free
_snprintf
_memicmp
memcpy
strrchr
memset
_initterm
GetLastError
InterlockedIncrement
CreateFileMappingA
MapViewOfFile
DisableThreadLibraryCalls
OpenFileMappingA
CreateMutexA
UnmapViewOfFile
CreateThread
VirtualAlloc
LoadLibraryA
GetProcAddress
OpenProcess
TerminateProcess
CloseHandle
IsBadReadPtr
lstrcpyA
GetFileAttributesA
MultiByteToWideChar
VirtualFree
LocalAlloc
LocalFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ