DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
2e069a9435edd628b999fa7c377fe12d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e069a9435edd628b999fa7c377fe12d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e069a9435edd628b999fa7c377fe12d_JaffaCakes118
Size
158KB
MD5
2e069a9435edd628b999fa7c377fe12d
SHA1
92416b7875e6e08aa980e6c903bf795fc9cf9829
SHA256
34677e349ef860fdb2fb673703158dc37a6478b8996ad6b4177ec880e9938e5c
SHA512
8a1f4622f28c1af883824199a8b4724b99889d2ca6f5db5cf26445a4f39990a8c33653d2ed93adafd206233d87d9f1c0ac8e6d110855a267c62005bc114e034d
SSDEEP
3072:YE2KawoZiv+LhvD3+Xw85gsMtZLiMNC4gPz4dppE92:tcMoB3+XwAr0iRepE92
Checks for missing Authenticode signature.
resource |
---|
2e069a9435edd628b999fa7c377fe12d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ