DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
3f7f460b1155acb85c1d310147cae8b7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f7f460b1155acb85c1d310147cae8b7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f7f460b1155acb85c1d310147cae8b7_JaffaCakes118
Size
56KB
MD5
3f7f460b1155acb85c1d310147cae8b7
SHA1
e6efe433b7fd6164c90e8fa8da5ebf346454161a
SHA256
7e5343ee7134a3360caad68976c65dd86a2a25f5af9a4b553e19dfdde327c598
SHA512
caba2062fae12574da33fc3975432cd01f2071bea4caaf4dea4565c770aad2d4633db8018c1ddb98c8fb531a99356720f06d5e0719bf0808202c98805d486f0b
SSDEEP
1536:P+ItrAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:19Am+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
3f7f460b1155acb85c1d310147cae8b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ