DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
79627b8e3ba04b4cd847c085f4a9f49c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
79627b8e3ba04b4cd847c085f4a9f49c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
79627b8e3ba04b4cd847c085f4a9f49c_JaffaCakes118
Size
120KB
MD5
79627b8e3ba04b4cd847c085f4a9f49c
SHA1
6ca1fac798a2c6cbc91337919a3ccb568d1e95db
SHA256
43eede88a1201a1c7b212737fa7c1102bb3ecd09ed9ee5da60cae914d478a751
SHA512
34dff0638874f28b333087cd821f022e4c425903db80f30fa75ba6cb2231df12456f31596ff1b82416711a8dc563ef990ef5c8209e9356d09a7723199e90c637
SSDEEP
3072:6eu9tUxa5UqOzvcS9Twrsl0m6IzXr2Yo6e:6cxa5azvckTwrsl0m6+XaY8
Checks for missing Authenticode signature.
resource |
---|
79627b8e3ba04b4cd847c085f4a9f49c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
EnterCriticalSection
lstrcpyA
lstrcatA
HeapDestroy
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
LoadLibraryExA
lstrcpynA
GetCurrentProcess
IsDBCSLeadByte
InitializeCriticalSection
DisableThreadLibraryCalls
lstrcmpiA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
GetTickCount
GetLastError
FlushInstructionCache
GetProcAddress
LoadLibraryA
lstrlenA
LoadStringA
CharNextA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
ProgIDFromCLSID
CoTaskMemAlloc
RegisterTypeLi
LoadTypeLi
SysAllocString
LoadRegTypeLi
GetErrorInfo
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
SafeArrayUnaccessData
SafeArrayAccessData
DispCallFunc
VariantClear
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
VarUI4FromStr
SysStringLen
DK2ReadRandomNumbers
DK2DecrementDownCounter
DK2ReadMemory
DK2ReadDownCounter
DK2SendAlgorithmString
DK2Success
FindDK2
DK2ThroughEncryption
DK2DriverInstalled
wcslen
time
_except_handler3
?terminate@@YAXXZ
__dllonexit
srand
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
rand
memcpy
realloc
wcsncpy
_ultoa
_CxxThrowException
_vsnprintf
atoi
isdigit
strcmp
sprintf
vsprintf
strcpy
strcat
strlen
strncpy
??3@YAXPAX@Z
__CxxFrameHandler
free
_purecall
??2@YAPAXI@Z
memset
malloc
memcmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ