DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e2a2c2a232c7ff94225d004be52e3600_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e2a2c2a232c7ff94225d004be52e3600_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e2a2c2a232c7ff94225d004be52e3600_JaffaCakes118
Size
36KB
MD5
e2a2c2a232c7ff94225d004be52e3600
SHA1
68d3c034162b3fac1ca6f18def40e91523737106
SHA256
c7ad67c359c0302f390e591724a4710bdac990581c0021518447f8005fd51b3e
SHA512
5678cf2420e9819bf558de481a280183e0005976b288399537552cc9f4dae60d9dac430c9aae347f84cf007bb7f146d17a2b8a2d95818bfa8265a218d1d67450
SSDEEP
384:S9XhRxtTgbB/BPZKmop0yw7BakMfyVBJa7XnxmKezzvpAVS:S9XaB/BPZKm17kkMfGba7XQ/
Checks for missing Authenticode signature.
resource |
---|
e2a2c2a232c7ff94225d004be52e3600_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
InterlockedDecrement
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetSystemDirectoryA
DisableThreadLibraryCalls
HeapReAlloc
HeapFree
InterlockedIncrement
HeapCreate
DeleteCriticalSection
InitializeCriticalSection
HeapAlloc
GetVersionExA
GetSystemInfo
GetLastError
LoadLibraryExA
DebugBreak
CharNextA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
ShellExecuteA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
VarUI4FromStr
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocString
RegisterTypeLi
LoadTypeLi
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ