DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1bf58eeb05516916e39e5ea55e5a6bc7_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1bf58eeb05516916e39e5ea55e5a6bc7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1bf58eeb05516916e39e5ea55e5a6bc7_JaffaCakes118
Size
27KB
MD5
1bf58eeb05516916e39e5ea55e5a6bc7
SHA1
0d6f07fa6c94e1902909f542c34f9c6916a08448
SHA256
8b5fe24e2cbdb9e5ad94fe47f61af2094736e7be789caf3657bf6b1cf5e30b8c
SHA512
484a5af5f9cb58d1efa8d9813d759f292ebd0335c3b5f5709d63e11d56c2b2af368cae63072802d5b9ecb00b9ef1e039c7131b7810be30e53dd613eef194fad8
SSDEEP
384:2xr/6vzp1t8YPPGbU/xBD1HC2eO8fyVm+8jQQwZNKvKDp+m/PeekGL:2x7Sp4OPqU573z86CjzWTDp+YPe0
Checks for missing Authenticode signature.
resource |
---|
1bf58eeb05516916e39e5ea55e5a6bc7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCatW
StrChrW
StrCmpNA
StrStrW
StrStrIA
StrCmpIW
StrRChrA
MapViewOfFile
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleA
CreateThread
CreateMutexA
ResetEvent
ExitThread
PulseEvent
HeapFree
GetProcessHeap
HeapAlloc
lstrcatA
lstrcpyA
InitializeCriticalSection
HeapDestroy
DeleteFileW
CreateProcessW
GetBinaryTypeW
WriteFile
CloseHandle
CreateFileW
GetTempFileNameW
GetLastError
CreateDirectoryW
GetTempPathW
lstrcpynA
GetProcAddress
FreeLibrary
LoadLibraryA
HeapCreate
GetUserDefaultLangID
GetLocaleInfoA
GetSystemDefaultLangID
GetVersionExW
CreateFileA
ReadFile
GetFileSize
GetTimeFormatA
GetDateFormatA
FindClose
FindNextFileA
DeleteFileA
lstrcmpA
FindFirstFileA
WideCharToMultiByte
Sleep
CreateFileMappingW
LeaveCriticalSection
MoveFileA
EnterCriticalSection
UnmapViewOfFile
SetFilePointer
WaitForSingleObject
CreateEventA
GetSystemMetrics
wsprintfA
ShellExecuteA
SHGetSpecialFolderPathA
CoInitializeEx
SafeArrayUnlock
SafeArrayLock
SysAllocString
SysAllocStringLen
SysAllocStringByteLen
VariantClear
VariantCopy
VariantInit
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ