DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0b9f54b3873497f274638521de1fc73b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0b9f54b3873497f274638521de1fc73b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0b9f54b3873497f274638521de1fc73b_JaffaCakes118
Size
31KB
MD5
0b9f54b3873497f274638521de1fc73b
SHA1
e8419532781b4ee066d8998bed9bb896ca0fba6f
SHA256
e99a49e62d188f169460c73605129b3c1f83b8e7f46120e306f3884dd5fbc651
SHA512
bcf85be1617cb9819faf6b3a469c2a5f74e1cec7d33a0842fc079c87c759be057fbb6b7ca0bb657cf2a089587e4ca8f47750425276d08f9b301994df2f5576a6
SSDEEP
384:+7MzhXmpWOFKVZOOFloE+JkgtNclgl5+JBrO+ieGsoano3VWBkc1WnKYJLF1:iMzAIOehvMLtwysJseGqo3e+DLr
Checks for missing Authenticode signature.
resource |
---|
0b9f54b3873497f274638521de1fc73b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynW
InterlockedIncrement
VirtualProtect
SetLastError
LocalAlloc
LocalFree
GetLastError
GetCurrentProcess
CreateFileW
GetFileTime
SetFileTime
GetCurrentThreadId
SetEvent
GetSystemDirectoryW
DeleteFileW
Sleep
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetModuleFileNameW
ExpandEnvironmentStringsW
LoadLibraryW
GetProcAddress
GetModuleHandleA
FreeLibrary
VirtualFree
InterlockedDecrement
PeekMessageW
PostThreadMessageW
CryptDestroyHash
InitializeSecurityDescriptor
BuildExplicitAccessWithNameW
SetEntriesInAclW
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptDestroyKey
CryptReleaseContext
CryptDecrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
RegSetKeySecurity
RegGetKeySecurity
AllocateAndInitializeSid
SetNamedSecurityInfoW
FreeSid
RegCreateKeyExW
RegCloseKey
CommandLineToArgvW
_adjust_fdiv
swprintf
wcscpy
??2@YAPAXI@Z
__CxxFrameHandler
memcmp
memset
memcpy
_snwprintf
wcslen
_wcsicmp
_wcsupr
wcscat
_wtoi
strlen
_onexit
free
malloc
__dllonexit
_initterm
SHSetValueW
SHDeleteValueW
SHGetValueW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ