DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2e1d14e16975f2964f806a70134b4fa7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e1d14e16975f2964f806a70134b4fa7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e1d14e16975f2964f806a70134b4fa7_JaffaCakes118
Size
36KB
MD5
2e1d14e16975f2964f806a70134b4fa7
SHA1
f937cf214231edb90d1449eff6e041217a84bf96
SHA256
666bc3db06c9d4f369201382ee3a2b3aefe2958c591e399f4ced5a95fc743acc
SHA512
84f536cb502404955d8d19074ee6871ba47a8022850fe1a1c7be0cd4b399203a4b2fb1fdc68accf9df4ca49a44f47e565a496b4c85b61eaacc55df1390a561e6
SSDEEP
192:sz7DDrde64X5aclQH0SGlZRUKR6TFu4II6A6bLtT/UNiUhcm9UsAdc0xg7yZVtOs:sLd94JeH0Zz6TFu4IDLtLUPcm0kyZys
Checks for missing Authenticode signature.
resource |
---|
2e1d14e16975f2964f806a70134b4fa7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetSystemTime
SystemTimeToFileTime
GetTickCount
lstrlenW
LeaveCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
MultiByteToWideChar
CoCreateFreeThreadedMarshaler
SysAllocStringLen
SysFreeString
LoadRegTypeLi
SysStringLen
ord32
ord21
ord16
ord23
ord18
ord57
ord30
ord58
ord25
ord15
isdigit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
memcmp
strchr
_onexit
toupper
sprintf
memset
strlen
wcslen
_except_handler3
?terminate@@YAXXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ