DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Hp8x6
Static task
static1
Behavioral task
behavioral1
Sample
f3de0545d9e70fbbb0e42454c5ef93ad_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3de0545d9e70fbbb0e42454c5ef93ad_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f3de0545d9e70fbbb0e42454c5ef93ad_JaffaCakes118
Size
54KB
MD5
f3de0545d9e70fbbb0e42454c5ef93ad
SHA1
5b071e279d42141fd9d3aaf878573f820af65137
SHA256
03de97f887b9ad5effb12a49a92c1fac8f376e5073b411ad3452db1c3565142c
SHA512
206c39ccf444e65910befee0b3ecac7b4a81d2d420e6b8444eace5e92be5693d99573b95f21023e025dc2a334e6d2baaf483251b74fb7352c33ce73656881c55
SSDEEP
768:5nJjAxNSxyY0GblNfZXkBqQlVd4lsFY5UP9U99IUsqnJjAxNSxyY0Gb:vjINSUkNfZ0IQh7YUP9mIURjINSU
Checks for missing Authenticode signature.
resource |
---|
f3de0545d9e70fbbb0e42454c5ef93ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImageDirectoryEntryToData
GetModuleFileNameA
MapViewOfFile
OpenFileMappingA
DisableThreadLibraryCalls
Sleep
HeapAlloc
GetSystemInfo
HeapCreate
GetVersion
CreateFileMappingA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
lstrcmpA
EnterCriticalSection
InterlockedDecrement
lstrlenW
WriteFile
ReadFile
GetFileSize
OpenFile
GetSystemDirectoryA
CreateThread
GlobalUnlock
GlobalLock
DebugBreak
HeapFree
UnmapViewOfFile
lstrcpyA
lstrlenA
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
lstrcmpiA
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
InterlockedIncrement
RtlUnwind
FindWindowA
SetWindowsHookExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
DragQueryFileA
ReleaseStgMedium
LoadRegTypeLi
SysFreeString
SysStringLen
ord15
ord32
ord23
ord16
ord21
ord30
ord57
ord18
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Hp8x6
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ