DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f076b1e732f12482563b3e0c5d50d058_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f076b1e732f12482563b3e0c5d50d058_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f076b1e732f12482563b3e0c5d50d058_JaffaCakes118
Size
86KB
MD5
f076b1e732f12482563b3e0c5d50d058
SHA1
ef22d08a09b26eb46422b95d38d6f0d4c7174b9e
SHA256
69fc429292c696ef289376fac5f73300ae9800be7ba304bfdb4c897fac70f573
SHA512
77a0a61b4c8a5094efedab30b2b772d4ee976eb7ffaeefb68a710a3b5296bd91e0400a0d510b7162a3bbbe9bbe5305e0e8c50eb7c148ee8d2905b7f3b6070cb9
SSDEEP
384:/tq6J6a59sJ85oMZ0uDTOyQNRVRKFKnInKEb9OvlT7he106emRXhf0:/f6ansIoMOu/orXKQeKmONT6GmRXl
Checks for missing Authenticode signature.
resource |
---|
f076b1e732f12482563b3e0c5d50d058_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
lstrcpyA
ResetEvent
lstrcatA
CompareStringA
CreateToolhelp32Snapshot
Process32First
CloseHandle
lstrlenA
lstrcpyW
GetVersion
OutputDebugStringA
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetLastError
GetLastError
SetEvent
GetModuleFileNameW
GetFileAttributesW
LoadLibraryW
GetProcessHeap
GetModuleHandleW
RtlUnwind
RegisterClassA
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
BeginPaint
wsprintfW
GetForegroundWindow
SetWindowLongA
UnregisterClassA
GetWindowLongA
CreateWindowExA
ShowWindow
GetClassInfoA
IsWindow
CallWindowProcA
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ