DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
06c8f831e4f428170f5843d85ab56322_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06c8f831e4f428170f5843d85ab56322_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
06c8f831e4f428170f5843d85ab56322_JaffaCakes118
Size
24KB
MD5
06c8f831e4f428170f5843d85ab56322
SHA1
0509b042dd7f5eb6d089b015c746067813d7e7d0
SHA256
cbf90340264bd776c08b2b6df04a5ff9ddce1a7f8d7f8983a5d94862c9c7adde
SHA512
3526eb415456e9db89a617a82d21bf3f946b80802799fda0d2cfef2ffe757f81da0bcdbbade5e0a9a383ff2923cac8fc7c24483b699b13baa6277cd9d9e1131d
SSDEEP
768:5zLHOvo8DrTzbbJUbNUqksjaN2yJorkdtpqbzFSqb:5zk/tQuorkUvcG
Checks for missing Authenticode signature.
resource |
---|
06c8f831e4f428170f5843d85ab56322_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
WinExec
CreateToolhelp32Snapshot
lstrcpyA
Process32Next
CompareStringA
TerminateProcess
Process32First
SetFileAttributesA
SetFileAttributesW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
LoadLibraryW
GetModuleFileNameA
OpenProcess
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
CloseHandle
ShowWindow
DestroyWindow
IsWindow
wsprintfW
RegisterClassA
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
SetWindowLongA
CallWindowProcA
CreateWindowExA
UnregisterClassA
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoInitialize
CoCreateInstance
CoUninitialize
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ