DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Hp8x6
Static task
static1
Behavioral task
behavioral1
Sample
f420c86187f0cfba3cc1e9dde27d0615_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f420c86187f0cfba3cc1e9dde27d0615_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f420c86187f0cfba3cc1e9dde27d0615_JaffaCakes118
Size
16KB
MD5
f420c86187f0cfba3cc1e9dde27d0615
SHA1
d80b98e6cede8f85e1282c1da0dea216f2a0fd12
SHA256
c1a173800c321a6c485ef35d6f1474bf968e8694db2a5126f011aff5e1c74638
SHA512
7a8dae3cef882786a795307a920d1aa7cd62ae3e360912d5f790a015043aa0807155b21f1aedeeb262fa7fef86edd60f09463c4ec65df661255487eb866967b2
SSDEEP
192:ZbhD0p5kpkABAqoTNKF3tGpD2jDmVLb9yVgbSiv0lRX0+rQXM7eBm6UOApURXNGX:jFntY2jKxb9yek5x7eYrUtNGbr
Checks for missing Authenticode signature.
resource |
---|
f420c86187f0cfba3cc1e9dde27d0615_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImageDirectoryEntryToData
GetModuleFileNameA
MapViewOfFile
OpenFileMappingA
DisableThreadLibraryCalls
Sleep
HeapAlloc
GetSystemInfo
HeapCreate
GetVersion
CreateFileMappingA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
lstrcmpA
EnterCriticalSection
InterlockedDecrement
lstrlenW
WriteFile
ReadFile
GetFileSize
OpenFile
GetSystemDirectoryA
CreateThread
GlobalUnlock
GlobalLock
DebugBreak
HeapFree
UnmapViewOfFile
lstrcpyA
lstrlenA
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
lstrcmpiA
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
InterlockedIncrement
RtlUnwind
FindWindowA
SetWindowsHookExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
DragQueryFileA
ReleaseStgMedium
LoadRegTypeLi
SysFreeString
SysStringLen
ord15
ord32
ord23
ord16
ord21
ord30
ord57
ord18
ord58
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Hp8x6
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ