DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f3b003e8a8f74e60741274182d989792_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f3b003e8a8f74e60741274182d989792_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f3b003e8a8f74e60741274182d989792_JaffaCakes118
Size
19KB
MD5
f3b003e8a8f74e60741274182d989792
SHA1
48d1fd5d824187f5ea5693d5f5c14c3a7bc43421
SHA256
7588140f04a197d915fcd1d529af33db2730dee9d92b16bf23f948ed835ce773
SHA512
d8c52319a4758874466638de031d374538e6b38d3121591211c080b199c20b8bfd95fcb65f4bf751f8faada0b92107b97320db6354075e1e019bea8b901359c9
SSDEEP
192:vHlTLZuq2z5KZcwXY9F81WLqwF8j1yqTHjNOU7mU9+hMjTc8+OScKFOcjI946/+h:9TTdKi9eS/msQgM0q
Checks for missing Authenticode signature.
resource |
---|
f3b003e8a8f74e60741274182d989792_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
GetVersionExA
SetEvent
CloseHandle
WaitForSingleObject
ExitThread
lstrcpyW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
lstrcpyA
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrcmpA
CreateThread
CompareStringW
CreateEventA
lstrcatA
wsprintfA
wsprintfW
CharLowerA
PeekMessageA
RegCreateKeyA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ