DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
96722f22c545b566c5a76f34d80f697b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
96722f22c545b566c5a76f34d80f697b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
96722f22c545b566c5a76f34d80f697b_JaffaCakes118
Size
36KB
MD5
96722f22c545b566c5a76f34d80f697b
SHA1
ef176133253a3d421c2361743f2913c53466348b
SHA256
6f1e657e2aca04db0628965ad5cdacc8fbef5e241095a2471e2bdd0b8ae738dd
SHA512
436ed5dbd67cc328f4e2459d2bcb2330ba019f44bf8d9f33f54b88599e34199982226956ab3004c55933ab8befc3c3d1e3da073a167f5acdc122b4870291662e
SSDEEP
768:7wv2A4cic/GsujK9N5Xv2WrPrHuNEeunu1LMX9ZgJxIj:c8wGsGK9zHDuKeuIAX9qJxc
Checks for missing Authenticode signature.
resource |
---|
96722f22c545b566c5a76f34d80f697b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetLastError
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
CloseHandle
ReadFile
GetModuleFileNameA
CreateFileA
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
LocalAlloc
InterlockedExchange
GetVersionExA
RaiseException
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetFileSize
CharNextA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
_except_handler3
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
wcslen
wcschr
swprintf
_wsplitpath
_wmakepath
wcscat
free
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ