DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
433486c6fba660cea3ecaa3fea48714c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
433486c6fba660cea3ecaa3fea48714c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
433486c6fba660cea3ecaa3fea48714c_JaffaCakes118
Size
712KB
MD5
433486c6fba660cea3ecaa3fea48714c
SHA1
ce1d7267abe0b954d753812b016546664260e559
SHA256
f9315444fe96c92ca78569d69b863bd14ab4b17ace957cdd8680d28435ebfe44
SHA512
216bdcc39b2add2f0b088edb2e7f4331e0b27ad080d54af4f84634fccfd6cd388dce61c8eaeb1b6deeadb9cfb92a327c65dc828426af9dcc60595c07530e0b87
SSDEEP
3072:dwiiaFspa8tnGzeeMIqcFnnPgOBTil8lVWPt+uS0YJH08c1Xw:dGEknGzeeMIqcFYwilr+ueJS
Checks for missing Authenticode signature.
resource |
---|
433486c6fba660cea3ecaa3fea48714c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryDosDeviceW
CloseHandle
SetComputerNameExW
SetCurrentDirectoryA
ReleaseSemaphore
SearchPathA
ReadConsoleA
SetThreadExecutionState
RtlUnwind
ReadFile
RtlUnicodeToMultiByteN
ResizePalette
GetPixel
CreateCompatibleBitmap
Pie
SelectPalette
RealizePalette
CloseFigure
_clearfp
__lc_collate_cp
iscntrl
RasGetCustomAuthDataA
RasConnectionNotificationW
SHLoadNonloadedIconOverlayIdentifiers
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ