DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
6381a8840da5799dc5327e7df6f256ab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6381a8840da5799dc5327e7df6f256ab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6381a8840da5799dc5327e7df6f256ab_JaffaCakes118
Size
56KB
MD5
6381a8840da5799dc5327e7df6f256ab
SHA1
3538a579f94f800193fdb304ddb36e127d5a4db5
SHA256
083979772d7a390e57771e2ea1d1c0779ac5f5bae9994069a538ac50e13bee30
SHA512
7003a621061d82daa98232e9adb11d25d44a75c96a23f3e52cfeae2d7910e9d6a2dec4d59799d799b9047529ceebe12ba172cd0f5f663fba7a675234a35d2dd2
SSDEEP
1536:l+ItUAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:riAm+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
6381a8840da5799dc5327e7df6f256ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ