DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
Static task
static1
Behavioral task
behavioral1
Sample
b4f42af8ad3262882238a946b78d5892_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4f42af8ad3262882238a946b78d5892_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
b4f42af8ad3262882238a946b78d5892_JaffaCakes118
Size
57KB
MD5
b4f42af8ad3262882238a946b78d5892
SHA1
8e8c44f7fa7f25ace5513e3579d15084d4ebab8b
SHA256
06845c19e103cee742663204caac5ccda81ac557724b05264778d2155d539886
SHA512
d07e533e7886b6f2ac06320663d366e034c76da57e785f8b14984d5fc5223c74f8972dd6f0898a9ae637f95f007fa76678a1266a3f7c5bcbe8f949bc5bdf32e8
SSDEEP
1536:vNIKDP4YU6EMyDcqiZZZNihyISFIR6/JP+3CT:2qP4YU6ErtGNEKIpCT
Checks for missing Authenticode signature.
resource |
---|
b4f42af8ad3262882238a946b78d5892_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegSetValueExA
RegOpenKeyExA
RegCloseKey
_adjust_fdiv
malloc
_initterm
free
sprintf
_snprintf
_memicmp
memcpy
strrchr
memset
DisableThreadLibraryCalls
lstrlenA
InterlockedIncrement
GetLastError
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
IsBadReadPtr
VirtualAlloc
lstrcpyA
MultiByteToWideChar
LocalAlloc
LoadLibraryA
LocalFree
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ