DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ec58e4710ea4c325307d6e13c1dc8087_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ec58e4710ea4c325307d6e13c1dc8087_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ec58e4710ea4c325307d6e13c1dc8087_JaffaCakes118
Size
71KB
MD5
ec58e4710ea4c325307d6e13c1dc8087
SHA1
8c5420214e1ad2051f2d51a63327d6eeffb2ae52
SHA256
6408523c83f0c110e17f6ca2effedcb57a911ae7659e290579b2ebaad30b871d
SHA512
8e5d14641add4eaa9482b73caabd45a7dc4fd199d48cbeb837bd2bd38413bfa1bbfa7c2b4a081f5734c906f0e10d57ae265e83bc6b59f3a1107c5d52246e74f7
SSDEEP
384:u4XmIsCyyv8g+EjaSg1WfjV5MjKkMM3qb5KwAvFBZhe106emRe0:up/CyyvrjA1yrM5bYKjvFBEGm4
Checks for missing Authenticode signature.
resource |
---|
ec58e4710ea4c325307d6e13c1dc8087_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
CreateToolhelp32Snapshot
Process32First
CompareStringA
lstrcpyA
OpenProcess
TerminateProcess
CloseHandle
GetModuleHandleW
GetModuleFileNameA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
ResetEvent
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
lstrcmpA
lstrlenA
RtlUnwind
GetProcessHeap
HeapFree
HeapAlloc
RegisterClassA
EndPaint
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
UnregisterClassA
CreateWindowExA
wsprintfW
LoadBitmapA
BeginPaint
CallWindowProcA
DestroyWindow
ShowWindow
IsWindow
CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CoInitialize
CoCreateInstance
CoUninitialize
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ