DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
20f5cbea0cebec4b7e6dcf15a7b17d49_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20f5cbea0cebec4b7e6dcf15a7b17d49_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
20f5cbea0cebec4b7e6dcf15a7b17d49_JaffaCakes118
Size
36KB
MD5
20f5cbea0cebec4b7e6dcf15a7b17d49
SHA1
af1466059f650ee4c7ce41fd92db290a831e0e42
SHA256
0db073f49edaadf1d8eb927aeee3c424442dc2cb4dc985938d390e266c181740
SHA512
cbbafb71bc87fe27b4b0b2858b8c395b1a6be2384cafa8c57d69bbf6a94f4f4fa763629929511892bb30ca7ae7123109376a2b2b79f41f703663fd9de598d5ed
SSDEEP
384:F7JkDzwQwSSio8ku9Aw1NQWv7Zm7OpjkyoZiTW7qMu8:bp8v9AOv7Zm7YhRTEu8
Checks for missing Authenticode signature.
resource |
---|
20f5cbea0cebec4b7e6dcf15a7b17d49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
lstrcpyA
lstrcpynA
GetFileAttributesA
GetDriveTypeA
MultiByteToWideChar
GetShortPathNameA
GetModuleFileNameA
GetSystemDirectoryA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
GetSystemInfo
lstrcatA
HeapCreate
lstrlenW
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
HeapDestroy
LoadLibraryA
GetModuleHandleA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
DebugBreak
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
CharNextA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ