DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
540b8c80f647a8f2492926c08ddba4bf_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
540b8c80f647a8f2492926c08ddba4bf_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
540b8c80f647a8f2492926c08ddba4bf_JaffaCakes118
Size
1.6MB
MD5
540b8c80f647a8f2492926c08ddba4bf
SHA1
e0e863122695a10a91c452a317079b9340fa587a
SHA256
76d5c248bf5bc7b4f1aac06c0d8a00ed6b9567073f623a833cd9b3a7ac1530f3
SHA512
b0e9df3773c4c06132f5b2692ddbb4a26f6fb61835e357f2d79aa1f2c4d1351198efdfb3ba9290cb0a9a8b17624ee4bf52837a14d9def5e587864a3a1a3015c9
SSDEEP
3072:SkNMinbAlVJkVpPBaog06mjE2RVKd/KfRNMAJYsFas107:NMOAlnkBa+6mkuRNfY
Checks for missing Authenticode signature.
resource |
---|
540b8c80f647a8f2492926c08ddba4bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetFilePointerEx
RtlUnwind
SetErrorMode
QueryPerformanceFrequency
SetCurrentDirectoryW
SetWaitableTimer
ConvertThreadToFiber
lstrlenW
RemoveDirectoryA
ReadConsoleInputA
LockResource
FindResourceA
FindResourceW
CloseHandle
LoadCursorW
LoadAcceleratorsW
DialogBoxParamA
OleRegGetUserType
CoGetMalloc
SetMapperFlags
EnumObjects
GetRandomRgn
PlayMetaFileRecord
GetSystemPaletteUse
SetBkMode
SetPixelV
SetPixel
strxfrm
iswdigit
getchar
SHChangeNotifyDeregister
SHRegOpenUSKeyA
SHRegSetPathA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ