DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
87c4d5e97dcaaab0c481cdeaca24f4b7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87c4d5e97dcaaab0c481cdeaca24f4b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
87c4d5e97dcaaab0c481cdeaca24f4b7_JaffaCakes118
Size
56KB
MD5
87c4d5e97dcaaab0c481cdeaca24f4b7
SHA1
b95dca03f098a38a23bc355874399cc1820ac07c
SHA256
1597f52c83a988643d66c967d6e1138bfe258c4fabbddbd5466e3108494068e8
SHA512
c5de0550de35560bb83adc3b8fae3c58883646d8dcab56ec231f0017eb1749be1c35998e2b7ab7cac376d26b31042cecae6fc2854ea0f5bbc9ba65441998164f
SSDEEP
1536:6+ItrAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:G5Am+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
87c4d5e97dcaaab0c481cdeaca24f4b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ