DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
6c038e685bc79b14f7a8d021172fccb2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6c038e685bc79b14f7a8d021172fccb2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
6c038e685bc79b14f7a8d021172fccb2_JaffaCakes118
Size
96KB
MD5
6c038e685bc79b14f7a8d021172fccb2
SHA1
879eb98a697cfc932bf8b69356e3564d477c4567
SHA256
1a1f96760887c076a2a656cd841b46bb2c24cf6f49545af26772cd6c7a652aea
SHA512
22c10a461f581b0c4269aebdecb87fba8e1896a35771c0195f206b11c19a32f0316926cbfb9096c025fc71b13e8eb3f12c972577e64996e78d9c42d621e41152
SSDEEP
1536:DqN5DQW3dIw5z/c1CHDV2bTRrcuqjNnT3dPbxM/4xoT0dt+t:wNIwhkeMbTRAjjFKm4
Checks for missing Authenticode signature.
resource |
---|
6c038e685bc79b14f7a8d021172fccb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ClearEventLogA
ImpersonateAnonymousToken
NotifyChangeEventLog
ReadEventLogA
RegCloseKey
RegDeleteKeyA
RegGetValueA
RegisterEventSourceA
CloseHandle
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DisconnectNamedPipe
EnterCriticalSection
FindClose
FindNextStreamW
FlushConsoleInputBuffer
GetCommModemStatus
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetHandleInformation
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
ReplaceFileA
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCommBreak
SetConsoleMode
SetCurrentDirectoryA
SetEnvironmentVariableA
SetEvent
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeA
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ