DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2698bdae50f72325c87a42de17e36657_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2698bdae50f72325c87a42de17e36657_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2698bdae50f72325c87a42de17e36657_JaffaCakes118
Size
48KB
MD5
2698bdae50f72325c87a42de17e36657
SHA1
ddb3eefdb68a80bac5b1acf809ef492fa782a253
SHA256
d70509471da02fb63fcac5279f00947483b1370494dd3bd763bae422b6858c6e
SHA512
353ddc572c0ffd8542d622996e5c3eb4f154e8c41b4c4ff0394c8a6c7493f9a167553b46e1aa4abf593041cf68b2fdaed3731daf4efef931ef1adef615530956
SSDEEP
768:zXb8uLAlSSazPvU7ZCeStxdw2R1OEHzSniAa5unqy2Kou2JC5O/flefzF8kjoirN:zL8uLMezPverOdwM1OOz2vaAqvKouZwo
Checks for missing Authenticode signature.
resource |
---|
2698bdae50f72325c87a42de17e36657_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcessId
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapAlloc
CloseHandle
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
Sleep
CreateThread
WideCharToMultiByte
GetLocalTime
CreateEventA
DeleteFileA
GetWindowsDirectoryA
WritePrivateProfileStringA
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
GetSystemInfo
GetCommandLineW
DefWindowProcA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
SendMessageA
IsWindow
CreateWindowExA
ShowWindow
FindWindowExA
KillTimer
SetTimer
PostMessageA
SetWindowTextA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
fopen
_strlwr
fwrite
fclose
strstr
strcmp
strrchr
free
_initterm
malloc
_adjust_fdiv
_stricmp
strchr
memcmp
??2@YAPAXI@Z
_purecall
memset
rand
strlen
memcpy
_access
sprintf
strcpy
??3@YAXPAX@Z
strcat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ