DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
25f19f0cbcbf18c1405036fa04a23cd7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
25f19f0cbcbf18c1405036fa04a23cd7_JaffaCakes118
Size
40KB
MD5
25f19f0cbcbf18c1405036fa04a23cd7
SHA1
872c94c2874b1f43ab8bb0a1d3048caa85892c73
SHA256
a22232e69278020fffeaf6a82f34479f947c427d70f42fcdb68a3aefe0709d32
SHA512
57728cbdee5fe619f5cf36012e775b637e8d764358468da8c8818f66497b2439345674188b98b3f51b38557762102a166982c48e5beb3d1580abdcc703e7dcdd
SSDEEP
192:hG/QHslPKdgG9LGfCD8NoVF9GJUpGVkVGKnrn1IPfATTkEQ+oa6TG4:hEOxD9GJUkVkgSrn1IOkEQja6
Checks for missing Authenticode signature.
resource |
---|
25f19f0cbcbf18c1405036fa04a23cd7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord23
ord21
ord16
ord15
ord18
ord57
ord32
ord58
ord30
ord31
DisableThreadLibraryCalls
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
OutputDebugStringA
Sleep
CreateThread
WideCharToMultiByte
FindWindowExA
SendMessageA
GetForegroundWindow
GetClassNameA
SetWindowTextA
VariantCopy
VariantChangeType
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
SysFreeString
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
strstr
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_mbsstr
_mbslwr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ