DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
15821195978d0b8868aecbf6c4f6bee1_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15821195978d0b8868aecbf6c4f6bee1_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
15821195978d0b8868aecbf6c4f6bee1_JaffaCakes118
Size
56KB
MD5
15821195978d0b8868aecbf6c4f6bee1
SHA1
b81a4c6598895b33e58f7fc924061cf58a7f6274
SHA256
b9fbc70ee2cc702b4ea3e4040050a01c9c3f6911eab88a5fea717691052d359d
SHA512
86711243cc2e168b9a1491c84e84b9a9aa2c0153d0c3619cf1feb914999a152183298b5f1d6b312949e31cbfae173af3b26f7b28973962026281239acd14dce7
SSDEEP
1536:S+ItLQAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:etQAm+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
15821195978d0b8868aecbf6c4f6bee1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ