DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0b8b22a3b8cdba602df0d4ffaa8f1833_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0b8b22a3b8cdba602df0d4ffaa8f1833_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0b8b22a3b8cdba602df0d4ffaa8f1833_JaffaCakes118
Size
664KB
MD5
0b8b22a3b8cdba602df0d4ffaa8f1833
SHA1
babf522e227bbe991f58827f18e4e8a63deb5a61
SHA256
c32d8ed1a514405a8f052b8918b6eb0d6ca6a1aaac7f9cf663f40ba1bdc844fe
SHA512
ba54b6fce45c8fee08ea010fc7171c600e1e1cdf9229e5899b46f600276d98ef3b8447d11376c508a5ff6f28f1f21347dbc775ba16daf255e9a3035acf49f4d1
SSDEEP
3072:KLaEiCMzKHwGHqpMraCQtTmJuF7LNkQXZjI9ivJb/nPeunaC3oyv:KuoStTWuF7LzXZjI9ivJb/
Checks for missing Authenticode signature.
resource |
---|
0b8b22a3b8cdba602df0d4ffaa8f1833_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemInfo
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetVersionExA
HeapCreate
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
DisableThreadLibraryCalls
lstrcpyA
lstrcatA
DebugBreak
HeapReAlloc
HeapFree
HeapAlloc
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryExA
GetLastError
LoadLibraryA
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ