DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
377f3b8a85403f0f93fb96e3f94c3419_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
377f3b8a85403f0f93fb96e3f94c3419_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
377f3b8a85403f0f93fb96e3f94c3419_JaffaCakes118
Size
93KB
MD5
377f3b8a85403f0f93fb96e3f94c3419
SHA1
9c471d46c459e399e029193400c75669613f0506
SHA256
c731aa65140fc5a529fc23fcdf92295d5f62629dcaf8c3430ae153f638fe4e69
SHA512
a714db7c412039cc93685b62ce5fb97d5f86d3050eb5f3c747c985f64b3c18a3802ab4c1edbac7fd04482e8da747360ccab7a3503bde8848216363908256d740
SSDEEP
1536:PZuo6/Bf3ozOlfNNIEsLwPmbu8028PiODJOJgCItaUqpbUgWe:TeBf3oalffIEwu89WsJySphWe
Checks for missing Authenticode signature.
resource |
---|
377f3b8a85403f0f93fb96e3f94c3419_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadWritePtr
InterlockedIncrement
InterlockedDecrement
SetLastError
IsBadReadPtr
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetLastError
lstrlenA
LoadLibraryExW
Sleep
_adjust_fdiv
_initterm
free
memcpy
memset
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
memcmp
??2@YAPAXI@Z
??1type_info@@UAE@XZ
wcsrchr
wcslen
wcsncpy
wcscat
malloc
_except_handler3
?terminate@@YAXXZ
realloc
_msize
_purecall
memmove
ClosePrinter
OpenPrinterW
GetPrinterDriverW
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ