DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
17678f624b6aa1b361dc38545553d7f6_JaffaCakes118.dll
Resource
win7-20240611-en
Target
17678f624b6aa1b361dc38545553d7f6_JaffaCakes118
Size
56KB
MD5
17678f624b6aa1b361dc38545553d7f6
SHA1
11b82ede06599f849cadf40d2c27f86f97dc496e
SHA256
3f6962f8d9d86ddb6d942fe029f82205b89bbe75564d5947473d602618862f34
SHA512
10f1cb7295cf843d5f84f66ed738fdb42dcc5dc244ee6907233ab14998299628be791454e853a2e79762556c7e67f45049469e17282907aaa52ce6ef85aaca26
SSDEEP
1536:zoP3fxoX3hotzQUhv9t/f1PcR3sFMvGj6ctItcFqVI5qX6N7A7UP:W6ZcHqEAU
Checks for missing Authenticode signature.
resource |
---|
17678f624b6aa1b361dc38545553d7f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
lstrlenA
LeaveCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
EnterCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrcpyA
GetShortPathNameA
MessageBoxA
CharNextA
LoadImageA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ShellExecuteA
CoCreateInstance
LoadRegTypeLi
RegisterTypeLi
SysAllocString
LoadTypeLi
SysStringLen
SysAllocStringLen
SysFreeString
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
DeleteDC
GetDIBColorTable
CreateCompatibleDC
_initterm
free
memcmp
_purecall
_stricmp
memcpy
malloc
strcat
rand
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
strcpy
strlen
_adjust_fdiv
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ