DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
fe0cf0272f2a58393d050f1515a66f66_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe0cf0272f2a58393d050f1515a66f66_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fe0cf0272f2a58393d050f1515a66f66_JaffaCakes118
Size
52KB
MD5
fe0cf0272f2a58393d050f1515a66f66
SHA1
6c9964ef68463169bf7320755a5f060635e43434
SHA256
8862f9ea1a961394b21a0a9c20e77eba836092adced17c95aa85bb3c18dd9c44
SHA512
a283aa91024bf9cf72a3ad4c27fc07ac2a3070cbe7167445a09f38bb56aa081cbb947d1b93f6d5cd4288c636416bddf08097dd288b314119bc6d06ca2439291b
SSDEEP
768:0mZbWXNbBQlWBQ0+xZglq8QrUBF9WkUTWQIX:0IcNdQMBQ04xrUBPaTWJX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe0cf0272f2a58393d050f1515a66f66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
LocalFree
lstrcpynA
InitializeCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
lstrlenW
DeleteCriticalSection
lstrcatA
GetModuleFileNameA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
HeapDestroy
InterlockedDecrement
MultiByteToWideChar
GetProcAddress
lstrlenA
LoadLibraryA
lstrcpyA
GetLastError
FreeLibrary
GetShortPathNameA
GetModuleHandleA
OutputDebugStringA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
memcmp
realloc
??1type_info@@UAE@XZ
free
_purecall
malloc
_onexit
__dllonexit
_adjust_fdiv
_initterm
?terminate@@YAXXZ
memset
memcpy
??3@YAXPAX@Z
_CxxThrowException
??2@YAPAXI@Z
_except_handler3
wcslen
__CxxFrameHandler
CoTaskMemAlloc
CoTaskMemFree
CreateClassMoniker
CoCreateInstance
CoTaskMemRealloc
GetRunningObjectTable
UuidFromStringA
CharNextA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE