DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
UTB
Static task
static1
Behavioral task
behavioral1
Sample
08a3edbe08e6633039154908b406839c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08a3edbe08e6633039154908b406839c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
08a3edbe08e6633039154908b406839c_JaffaCakes118
Size
48KB
MD5
08a3edbe08e6633039154908b406839c
SHA1
c03e1ca5f81ab22b0083b9d1492298211015ed51
SHA256
d4979436089c0a7684f38acd7e955f9ef28c30e1c4dda186b637ab7a5f68b60c
SHA512
931377407d341a010e83b211bd0a9af99c63a43555caeb2722acc3c0d223a31f8104d52922beed7e662c1527009f0b8c216c6e6048c592ce5095a96455828066
SSDEEP
768:dGEu+AVboj5fbt3s3QpPOyKOmdBBJsc3VLFVq7dPrOkcJV6ZHJ:lu+AVbojFi15XVq7d5cJV6ZH
Checks for missing Authenticode signature.
resource |
---|
08a3edbe08e6633039154908b406839c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
DebugBreak
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
lstrcatA
GetFileAttributesA
GetDriveTypeA
lstrcpynA
ReadFile
GetFileSize
MoveFileA
GetShortPathNameA
InitializeCriticalSection
SetLastError
SetFileAttributesA
SetEndOfFile
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
GetEnvironmentVariableA
GetModuleFileNameA
GetLastError
GetCurrentProcess
CallNamedPipeA
GetVersionExA
FlushFileBuffers
CloseHandle
DeleteFileA
WriteFile
lstrcmpA
CreateFileA
lstrcmpiA
MultiByteToWideChar
lstrlenA
lstrcpyA
lstrlenW
GetWindowsDirectoryA
WideCharToMultiByte
SetPropA
SetWindowLongA
SendMessageA
GetWindowRect
wsprintfA
GetPropA
RemovePropA
GetParent
PostMessageA
CallWindowProcA
RegCloseKey
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegEnumKeyExA
RegOpenKeyExA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
StringFromGUID2
CoInitialize
CoUninitialize
CoTaskMemRealloc
CLSIDFromProgID
CoCreateInstance
CoFreeUnusedLibraries
VariantClear
VariantChangeTypeEx
SysFreeString
VariantInit
SysAllocString
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
UTB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ