DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
153015497875e51cf658c234a5afe659_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
153015497875e51cf658c234a5afe659_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
153015497875e51cf658c234a5afe659_JaffaCakes118
Size
56KB
MD5
153015497875e51cf658c234a5afe659
SHA1
f12dcb955a519f84515b3de79dea5133cf28935c
SHA256
f770654872b1a267e5daf5ce4ec40f196013e0e8befa2c24c30dd5181986aab2
SHA512
effe3a94c0353bd6480fccd8d72681eb34a4a65d86c7ded6bf8fc71206b2e7480f25aaf708b814cf7229b3ed7d8791be21448d35c3c98ad1493ba182f51635ea
SSDEEP
1536:J+ItrAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:f5Am+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
153015497875e51cf658c234a5afe659_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ