DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2b9baef9c540e3802112b833da7e1777_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b9baef9c540e3802112b833da7e1777_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2b9baef9c540e3802112b833da7e1777_JaffaCakes118
Size
1.1MB
MD5
2b9baef9c540e3802112b833da7e1777
SHA1
14b269eef26feb13156100769d77412d68c125cc
SHA256
c0728321384ecbc3a90fcaee2f0da31204a3063cc649c3e18a14080d4c2974ba
SHA512
ef4653b3d0075d55dae50651c1dc9856dbdca99c94be297e4573911e7dec8e6efe77d8d5d2cd4991033a8a2d0cfaf63adbdada7d064fd89fe830384cf2ae5848
SSDEEP
3072:dwiiaFspa8tnGzeeMIqcFnnPgOBTil8lVWPt+uS0YJH08c1:dGEknGzeeMIqcFYwilr+ueJ
Checks for missing Authenticode signature.
resource |
---|
2b9baef9c540e3802112b833da7e1777_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryDosDeviceW
CloseHandle
SetComputerNameExW
SetCurrentDirectoryA
ReleaseSemaphore
SearchPathA
ReadConsoleA
SetThreadExecutionState
RtlUnwind
ReadFile
RtlUnicodeToMultiByteN
ResizePalette
GetPixel
CreateCompatibleBitmap
Pie
SelectPalette
RealizePalette
CloseFigure
_clearfp
__lc_collate_cp
iscntrl
RasGetCustomAuthDataA
RasConnectionNotificationW
SHLoadNonloadedIconOverlayIdentifiers
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ