DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
ef5d8062cba1765f68379e824fa99573_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef5d8062cba1765f68379e824fa99573_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef5d8062cba1765f68379e824fa99573_JaffaCakes118
Size
56KB
MD5
ef5d8062cba1765f68379e824fa99573
SHA1
d6e756848b36131efd27b233a160c181a4f1050a
SHA256
98b7e99c21f95793f855578edbcc8358f2b47b40557602d5f28b704a22ad9fc7
SHA512
0e4beb11cfc9f5f2ca34502315c529ca9a0392e9d448c2bf7f075e3794e4d9866c621664e29d86839faed13785806a5717d1559a9cdcc275b2a29b348f6a79e4
SSDEEP
1536:T+ItHAg0Y+WiABVQohIpNhqCdP84iODD7a8CTb:5JAm+WiABeohIpNnva8CTb
Checks for missing Authenticode signature.
resource |
---|
ef5d8062cba1765f68379e824fa99573_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_snprintf
_memicmp
memcpy
strrchr
memset
LocalFree
DisableThreadLibraryCalls
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ