DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2ff895a72b305aef8ef872d154df5489_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ff895a72b305aef8ef872d154df5489_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ff895a72b305aef8ef872d154df5489_JaffaCakes118
Size
52KB
MD5
2ff895a72b305aef8ef872d154df5489
SHA1
caf6548846b90642f7d7713b33626c5142f2f329
SHA256
0f88a625333f911438b94ac7126dc5fd99513212956fbd1080a887f6c9de534c
SHA512
d2feed42f3a7b7ec538eeff27f034ce79e63a347eac4936fc189a7cd68031e08ebde3c6f5bdb0f6f77103ee6aa3e15b0c1f6df8a9a614a4f23173860c215aace
SSDEEP
1536:n9c9Yb9EU0/nhdz5RG1LiXYqx5mDU/3q:WI2XbKU/
Checks for missing Authenticode signature.
resource |
---|
2ff895a72b305aef8ef872d154df5489_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
SetFileAttributesA
GetPrivateProfileStringA
FindFirstFileA
LocalFree
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
lstrlenA
WritePrivateProfileStringA
GetCurrentProcessId
RemoveDirectoryA
GetCommandLineW
MoveFileA
ExitProcess
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
FreeLibrary
Sleep
LoadLibraryA
GetProcAddress
DeleteFileA
lstrlenW
WideCharToMultiByte
Process32First
Process32Next
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreateThread
CloseHandle
CreateDirectoryA
SetEntriesInAclA
BuildExplicitAccessWithNameA
SetNamedSecurityInfoA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
GetNamedSecurityInfoA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoUninitialize
SysFreeString
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
??3@YAXPAX@Z
_strlwr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
_wcslwr
wcsstr
memcpy
atoi
memcmp
strcmp
strstr
strncmp
strchr
strncpy
strrchr
fopen
strlen
memset
strcat
strcpy
sprintf
_access
_strupr
fclose
fread
??2@YAPAXI@Z
ftell
fseek
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ