DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
319b1af603f21b25b0a585f0e122ceb8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
319b1af603f21b25b0a585f0e122ceb8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
319b1af603f21b25b0a585f0e122ceb8_JaffaCakes118
Size
48KB
MD5
319b1af603f21b25b0a585f0e122ceb8
SHA1
ec58cca71b180bf7127a49d4d9f914d1fd8cc8a5
SHA256
a6e90bd9158731195a6ef112efd487bd629c52b99af98f254861a08154e91bdd
SHA512
0ef15e0d62eda281ba746fe85e62f0fd20f0d8a29e775322b0551320bf3f3804a5b16dea32c9522fde4a33ab0431058b4d94dec6044afa5e896df798ea19094a
SSDEEP
768:SyB+IvQpLQJc6zBpALZbvSpqql66qyu59qNrAyoPjt0HUIxZ0fRwL33:SirvQpsJz3yRzql66qyueFYPj6UyaWL3
Checks for missing Authenticode signature.
resource |
---|
319b1af603f21b25b0a585f0e122ceb8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
Sleep
CreateThread
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
GetLastError
CreateEventA
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetWindowsDirectoryA
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetLocalTime
GetCommandLineW
DeleteFileA
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
LeaveCriticalSection
CloseHandle
SendMessageA
RegisterClassExA
CallNextHookEx
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
PostMessageA
CreateWindowExA
ShowWindow
IsWindow
SetWindowTextA
DefWindowProcA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
memcmp
_purecall
_stricmp
strstr
strcmp
memset
strcpy
free
_initterm
malloc
_adjust_fdiv
_strlwr
strrchr
rand
strlen
memcpy
??2@YAPAXI@Z
strchr
fopen
fwrite
fclose
sprintf
strcat
??3@YAXPAX@Z
_access
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ