DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2dd9c17efd5ed235405ee9e7ae37f89d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dd9c17efd5ed235405ee9e7ae37f89d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2dd9c17efd5ed235405ee9e7ae37f89d_JaffaCakes118
Size
18KB
MD5
2dd9c17efd5ed235405ee9e7ae37f89d
SHA1
655913307289bed6f8e5d962dd7051d5a781a5b6
SHA256
43a55fb0766291b8e866de57fce0f65f2a908513c584c7bb6c980438696e9b54
SHA512
b9874b747fa7d8621b4cfb500111f760a162df839b8972e4d049d9b350a0710db168e2c868d945645565beca1e572c0a4245dfc864cbcf8e37bbf838f8e2664a
SSDEEP
192:74qwcchost7M99ucr/VWXKfcBwSL0KF0gA0RXLyp//sTovD:8qwWslpzXKfA0KSUylsI
Checks for missing Authenticode signature.
resource |
---|
2dd9c17efd5ed235405ee9e7ae37f89d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
SetEvent
lstrlenW
GetVersionExA
WaitForSingleObject
ExitThread
lstrcpyW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
lstrcpyA
lstrcatA
GetSystemDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrcmpA
CreateThread
CompareStringW
CreateEventA
ReadFile
wsprintfW
CharLowerA
wsprintfA
GetClientRect
GetWindowThreadProcessId
ShowWindow
GetForegroundWindow
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegCreateKeyA
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ