DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f5bc0b77245256888b9437dbb3eb48b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f5bc0b77245256888b9437dbb3eb48b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f5bc0b77245256888b9437dbb3eb48b_JaffaCakes118
Size
73KB
MD5
2f5bc0b77245256888b9437dbb3eb48b
SHA1
af62d3709b0fa36947ac6dc155f15126480502c7
SHA256
1fc37ddfbc6115c99754985f3b61f6d05274d8fdac139fad571f4abdbdaf8eef
SHA512
cc1e0b226f97ff2744fd3ece85f11c86777d587a34794583a4a59134a437edbf288f213a1f18a2cbabe3c2842ba923d774c7371f91334234faa4e526c36a61fa
SSDEEP
384:xpQlzVHFDY04GzrsWNlOPT48W9sMKDMYob5KAAvFBahe106emRes:xpQJvlbOPT2C1MYmKTvFBFGmM
Checks for missing Authenticode signature.
resource |
---|
2f5bc0b77245256888b9437dbb3eb48b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateToolhelp32Snapshot
Process32First
CompareStringA
GetModuleHandleW
OpenProcess
TerminateProcess
CloseHandle
GetModuleFileNameA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
ResetEvent
GetFileAttributesA
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
lstrcmpA
lstrlenA
RtlUnwind
GetProcessHeap
HeapFree
HeapAlloc
ShowWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
CreateWindowExA
UnregisterClassA
RegisterClassA
wsprintfW
LoadBitmapA
BeginPaint
EndPaint
CallWindowProcA
IsWindow
DestroyWindow
CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CoInitialize
CoCreateInstance
CoUninitialize
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ