DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
c04a9eb3aaac8cb6234cf7cd1f43f37e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c04a9eb3aaac8cb6234cf7cd1f43f37e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c04a9eb3aaac8cb6234cf7cd1f43f37e_JaffaCakes118
Size
56KB
MD5
c04a9eb3aaac8cb6234cf7cd1f43f37e
SHA1
4e94f9385567e4ee88a2e630db2924f141d030c5
SHA256
8cb7d50713b552e6d798c59aa8e474128b00abf743b0eebcfd68327b0320dd8f
SHA512
00ae670883361974aaffa154a0f21039b6a228161f59978508a91ec87ba3b58fd304ee4e7215ce12adddc6607bced27a219fd8dfd22f03167e2f88ea1131cf44
SSDEEP
1536:q+ItLQAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:2tQAm+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
c04a9eb3aaac8cb6234cf7cd1f43f37e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ