DllCanUnloadNow
DllGetClassObject
a
Static task
static1
Behavioral task
behavioral1
Sample
33f695085586a1ef6f8d8937e68f0837_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33f695085586a1ef6f8d8937e68f0837_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33f695085586a1ef6f8d8937e68f0837_JaffaCakes118
Size
64KB
MD5
33f695085586a1ef6f8d8937e68f0837
SHA1
0bc7584a89bf68134b82ca65cb3fedf487c4c677
SHA256
8395175fe8e82eb0df0b7c9beb8ce1dbabc02060c9d11ba85b8f2f704494bd96
SHA512
aba8d90124a44829c48702b6ed25ad920f18fe02a1fc91efff23dfc64fd0f2cc06a7582b8b9bfd817b6a027e1ed38143e1e37e233133a06adbce0b22e45ac068
SSDEEP
1536:FcwRmMYhimKPXAjlF+LgEwM8eMxA/uRXkSTWyOBKtFZq8O:qw7YhimqXEv+LglZMgUSw0m
Checks for missing Authenticode signature.
resource |
---|
33f695085586a1ef6f8d8937e68f0837_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DispatchMessageA
DestroyIcon
CreateMenu
CreateIconFromResource
CreateDialogParamA
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CharUpperA
CharToOemA
CharLowerA
BeginPaint
ActivateKeyboardLayout
GetPrivateProfileStringA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
VirtualFree
UnmapViewOfFile
TlsGetValue
TlsFree
ReadFile
OpenFile
MapViewOfFile
LocalAlloc
LoadResource
CompareStringA
EnterCriticalSection
FindResourceA
GetDateFormatA
GetFileSize
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
LeaveCriticalSection
DllCanUnloadNow
DllGetClassObject
a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ