DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
03838efa677e6b4e05d25cbc61c6de56_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03838efa677e6b4e05d25cbc61c6de56_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03838efa677e6b4e05d25cbc61c6de56_JaffaCakes118
Size
82KB
MD5
03838efa677e6b4e05d25cbc61c6de56
SHA1
073b371273086c02ee3e910bf575852605a7d58c
SHA256
a712fe00b7f512fb1939e2c21c39b7b608a340a15e0b1f3d67965d648b9e3c54
SHA512
735d2a7cf7f6a1075369c9f0577a88a5fab8a3852426e743cc8479420d9f5c7c4b15295cb4a17dd8fc880fdf704f2b19dad18a25ca330667a32fd9fa84905a88
SSDEEP
384:xzheJMyDPE3VfIoV5MjKSb5KAAvF4he106emRX:xzk+yDP2RrM3KTvFfGmRX
Checks for missing Authenticode signature.
resource |
---|
03838efa677e6b4e05d25cbc61c6de56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CompareStringA
CreateToolhelp32Snapshot
Process32First
GetModuleHandleW
TerminateProcess
OpenProcess
CloseHandle
GetModuleFileNameA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
SetFileAttributesA
GetFileAttributesA
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
lstrlenA
lstrcmpA
RtlUnwind
GetProcessHeap
HeapFree
HeapAlloc
RegisterClassA
ShowWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
UnregisterClassA
CreateWindowExA
wsprintfW
LoadBitmapA
BeginPaint
EndPaint
CallWindowProcA
IsWindow
DestroyWindow
CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CoInitialize
CoCreateInstance
CoUninitialize
SysFreeString
SysAllocString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ