DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
e28cf6caa5334019a4999cdc11945206_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e28cf6caa5334019a4999cdc11945206_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e28cf6caa5334019a4999cdc11945206_JaffaCakes118
Size
173KB
MD5
e28cf6caa5334019a4999cdc11945206
SHA1
e5ffe80f8c7c2272793f61b83c9e7bd1621e31df
SHA256
4afd9f0dde092daeac3f3e6ffb0aee06682b3dba6005d2bd1a914eefd5cc6a30
SHA512
48f348b5a055790dd57f5759b9305a3c4486a1c4f75a757c76f0de76d0b2c2a3d0be0766ba1b6f2d7f2a71acf257cc11b825fee47bb7e37a42467da596b70d19
SSDEEP
3072:Fq4taaCrtdYHrKVHP82Zq0Cx3b810q6Yt7SP:A4UxU+q0U3IPSP
Checks for missing Authenticode signature.
resource |
---|
e28cf6caa5334019a4999cdc11945206_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ClearEventLogA
ImpersonateLoggedOnUser
ImpersonateNamedPipeClient
NotifyChangeEventLog
ReadEventLogA
RegCloseKey
RegFlushKey
RegNotifyChangeKeyValue
RegisterEventSourceA
CloseHandle
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FindClose
FindNextStreamW
FlushConsoleInputBuffer
FlushFileBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetHandleInformation
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
PurgeComm
QueryPerformanceCounter
ReadFile
ReplaceFileA
SetEndOfFile
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeA
lstrlenA
_amsg_exit
_initterm
_iob
_lock
_snprintf
_unlock
abort
calloc
free
fwrite
malloc
realloc
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ