DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
255ac7e2d4e333991fa5a736d65489d0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
255ac7e2d4e333991fa5a736d65489d0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
255ac7e2d4e333991fa5a736d65489d0_JaffaCakes118
Size
63KB
MD5
255ac7e2d4e333991fa5a736d65489d0
SHA1
e9c1bef6b8c7a96839e5b7e2302ca69357031b16
SHA256
5535f4e7d775a8f772abf0c8d3cf2d999d9a4d103c1cd93699b45a883951cd28
SHA512
5675ee71312ab30d3e0efe757356625192659fcaf99228e1c77fc6fa324d4198522db802178b49ead36f6084ceec45495cd0fff8fa50116db25ddfc6b3a75c74
SSDEEP
384:ii/PwWvzCljsl0RgQYnl4V7ujsrNGgwKrKoCV4EbUPIl6ThecqSSkK6xjzu:zoGARgQql486Gg9KoCV4jPU6LqIX
Checks for missing Authenticode signature.
resource |
---|
255ac7e2d4e333991fa5a736d65489d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
lstrcmpA
CompareStringA
OutputDebugStringA
CloseHandle
GetVersion
GetModuleFileNameA
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
GetModuleFileNameW
GetFileAttributesW
LoadLibraryW
Process32First
GetModuleHandleW
RtlUnwind
HeapAlloc
GetProcessHeap
HeapFree
Sleep
OpenProcess
TerminateProcess
lstrlenA
CallWindowProcA
RegisterClassA
IsWindow
GetClassInfoA
ShowWindow
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
BeginPaint
wsprintfW
SetWindowLongA
UnregisterClassA
GetWindowLongA
CreateWindowExA
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ