DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
29746c5c0793805026355143f2645cd5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29746c5c0793805026355143f2645cd5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29746c5c0793805026355143f2645cd5_JaffaCakes118
Size
52KB
MD5
29746c5c0793805026355143f2645cd5
SHA1
e50a41bd3c3ed01cbe5b478398447f4c8fab9f9c
SHA256
dfb7d881c43e48445fb268982a4cc18ea4db97fc220a5585bc0fc146ee1b64eb
SHA512
b797eee3089cdaaf6acdea66a6c388207c2b27c28a5ca246b4c01a8059c5dcb09c9c2c2f47bea7ff145f452623a97553f88e17245127ee164f030f61dd7daf89
SSDEEP
768:eUcQ/aJlV+K+lN5cvczE+6vovm5h4f1M7GpOGSsJlXyB:elJlg5cvUAvY+ufMLsJlXyB
Checks for missing Authenticode signature.
resource |
---|
29746c5c0793805026355143f2645cd5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
DisableThreadLibraryCalls
SetEvent
WriteFile
CreateFileA
Sleep
WaitForMultipleObjects
ResetEvent
CreateEventA
lstrlenA
FindClose
FindFirstFileA
GetModuleFileNameA
GetVersionExA
MoveFileExA
CopyFileA
lstrcatA
CreateDirectoryA
WinExec
GetEnvironmentVariableA
LocalFree
OpenProcess
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryExA
SetErrorMode
LoadLibraryA
GetFileAttributesA
CreateProcessA
GetSystemDirectoryA
DeleteFileA
WaitForSingleObject
GetExitCodeThread
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTickCount
GetWindowsDirectoryA
CreateMutexA
GetLastError
CloseHandle
InterlockedIncrement
VirtualProtect
GetShortPathNameA
UnhookWindowsHookEx
KillTimer
wsprintfA
SetTimer
DefWindowProcA
FindWindowExA
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
PostMessageA
CallNextHookEx
SetWindowsHookExA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
CoInitialize
OleInitialize
OleUninitialize
CoUninitialize
CoCreateGuid
fopen
fread
strstr
fwrite
free
fclose
_adjust_fdiv
_initterm
_onexit
__dllonexit
_strlwr
_stricmp
rewind
fgets
_strnicmp
_mbsnbcmp
_mbsnbcpy
_mbscmp
atol
??3@YAXPAX@Z
fprintf
time
sprintf
strncpy
_except_handler3
strrchr
_snprintf
_mbsstr
sscanf
_beginthreadex
strchr
__CxxFrameHandler
fseek
ftell
malloc
SetupIterateCabinetA
URLDownloadToFileA
InternetOpenA
InternetCrackUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetSetStatusCallback
InternetCloseHandle
InternetReadFile
HttpSendRequestA
InternetConnectA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
SHGetValueA
SHSetValueA
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ