DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e808cf142ff052da0731a13e57a3320_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e808cf142ff052da0731a13e57a3320_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0e808cf142ff052da0731a13e57a3320_JaffaCakes118
Size
48KB
MD5
0e808cf142ff052da0731a13e57a3320
SHA1
c018b78de3b474bc71dd4cf409ce35b1377ae894
SHA256
d1afb6f43a83a32fa6c06ff5c0d4072d6bbd21a834504565b25c02a5d09f52d3
SHA512
1ef3719bac7f6fd3b06a359e118cc08a91b25aab29e41b35e47da854ce7216b7f517cfef1983932234dca4085eb8702d0e6a02a18ef9911af1901434f1941b5e
SSDEEP
768:SyB+IvQpLQJc6zBpALZbvSpqql66qyu59qNrAyoPjt0HUIxZ0fRwL+:SirvQpsJz3yRzql66qyueFYPj6UyaWL
Checks for missing Authenticode signature.
resource |
---|
0e808cf142ff052da0731a13e57a3320_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
Sleep
CreateThread
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
GetLastError
CreateEventA
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetWindowsDirectoryA
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetLocalTime
GetCommandLineW
DeleteFileA
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
LeaveCriticalSection
CloseHandle
SendMessageA
RegisterClassExA
CallNextHookEx
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
IsWindow
SetWindowTextA
DefWindowProcA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
memcmp
_purecall
_stricmp
strstr
strcmp
memset
strcpy
free
_initterm
malloc
_adjust_fdiv
_strlwr
strrchr
rand
strlen
memcpy
??2@YAPAXI@Z
strchr
fopen
fwrite
fclose
sprintf
strcat
??3@YAXPAX@Z
_access
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ