DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0fa6b20d5684c3fb16e47d42b2ff3725_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0fa6b20d5684c3fb16e47d42b2ff3725_JaffaCakes118
Size
32KB
MD5
0fa6b20d5684c3fb16e47d42b2ff3725
SHA1
5c261114980fed04e52c9a0ceef088e3b922aa12
SHA256
903e9db9eb313c179aa6721b3067f1199d6ccf723eab7a4a12652f47730bb3d9
SHA512
ab0d8763cf88acdfef8d9da5ab30cb3d5a9c8ac692b58aaf72ed82ccb0b696a0181f900fcbf118d831a3c0b43209b50cfea78eace5d31e66e807ad69444c92d1
SSDEEP
384:bfZj6YYvbHEXmviHCZgQZhX/qOPglUKXYijQLu6vTgLHzV5y0pNMeEiT28Z:Z6PvbHkcgWJ//PpJS6sLHzry0p+e/T
Checks for missing Authenticode signature.
resource |
---|
0fa6b20d5684c3fb16e47d42b2ff3725_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
SetEvent
CloseHandle
WaitForSingleObject
ExitThread
GetTickCount
lstrlenW
GetModuleHandleA
lstrcpyW
lstrcatW
GetProcessHeap
HeapFree
lstrlenA
IsBadStringPtrA
lstrcmpA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
GetSystemDirectoryW
lstrcpyA
GetLastError
lstrcmpiA
HeapAlloc
HeapReAlloc
CompareStringW
Sleep
lstrcatA
GetSystemDirectoryA
SetFilePointer
CreateFileA
ReleaseMutex
SetEndOfFile
CreateEventA
CreateMutexA
CreateThread
ReadFile
WriteFile
WriteProcessMemory
GetCurrentProcess
VirtualProtect
wsprintfW
CharUpperW
CharLowerA
GetClassNameA
wsprintfA
CryptDecrypt
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptDestroyHash
CryptEncrypt
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
SetSecurityDescriptorDacl
CoGetMalloc
StringFromIID
SysAllocString
SysFreeString
InternetConnectA
InternetCrackUrlW
InternetCrackUrlA
CoInternetCombineUrl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ