DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
44a0d507be754f8adafd49363df2d5f0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44a0d507be754f8adafd49363df2d5f0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44a0d507be754f8adafd49363df2d5f0_JaffaCakes118
Size
56KB
MD5
44a0d507be754f8adafd49363df2d5f0
SHA1
6b58730464a859d35829dcc459474295d8c4a5e4
SHA256
2da8f4ee7954fc6b4293fb1c56b242f2fa687e0c2747a5088dcb6edc7f70be92
SHA512
0c3442f286b62cb3e1d0d375b2bbec3b49b9b99442aef227d2602e328f78113d4f350f6267a6a644093a065994ad5c3a99d074a01223c5ee080865cdad634119
SSDEEP
1536:p+ItrAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:/5Am+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
44a0d507be754f8adafd49363df2d5f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ