DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08b93025b68f16897f5b7eaec379af17_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08b93025b68f16897f5b7eaec379af17_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
08b93025b68f16897f5b7eaec379af17_JaffaCakes118
Size
28KB
MD5
08b93025b68f16897f5b7eaec379af17
SHA1
3637c92aa5e4f9e713a6a0d5bfa979051b74835a
SHA256
25760b0a9a8dd2c2c7903ad57a2ab6963de0157c06b22445954a4064f2fc2fdf
SHA512
4a8c3adc8c9db1e82dcc8f2d962a060e2a17242bc33c44c99b5f74ccc0e8c4eba21f420d76781b75b837e992645e6d4e510a455b4c896387ae02097441485c98
SSDEEP
768:oHuSaBIhCIYLNPHHubKmsWrUjH5CV1B0FD:oHuSaBIhyLNPnCprUj04
Checks for missing Authenticode signature.
resource |
---|
08b93025b68f16897f5b7eaec379af17_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
CreateToolhelp32Snapshot
lstrcpyA
Process32Next
CompareStringA
TerminateProcess
OpenProcess
Process32First
LoadLibraryW
GetFileAttributesA
SetFileAttributesA
WinExec
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleHandleA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
RegisterClassA
SetWindowLongA
ShowWindow
DestroyWindow
IsWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
UnregisterClassA
CallWindowProcA
CreateWindowExA
wsprintfW
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ