DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3613a1b9c47611b6e323d51e45005aa8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3613a1b9c47611b6e323d51e45005aa8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3613a1b9c47611b6e323d51e45005aa8_JaffaCakes118
Size
25KB
MD5
3613a1b9c47611b6e323d51e45005aa8
SHA1
c93053e83b3343ddd6aee9a4a41900ce50bf5708
SHA256
d0048cf5296310cfacadc55035771262eba2e33304efc8c7f9a9eb3d8bfc6f2e
SHA512
ef30d289e92f88b1fe13a2873e5e8f9b650361ee53374ec1af173df1e1921b71177eecc8b73f6cf17a91405ee51a69e4da4fc0e18ccfbe9f2b749a8c8bdd5f97
SSDEEP
384:q7o+KeHnbEV5FKuuu1Gn7mB2tZAbD6xkz3mhlpfCIb:vZeHbErLuu1GnM2tqbOFr
Checks for missing Authenticode signature.
resource |
---|
3613a1b9c47611b6e323d51e45005aa8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameW
SetLastError
GetLastError
OpenEventW
CreateToolhelp32Snapshot
OutputDebugStringA
Process32Next
GetModuleFileNameA
Process32First
FindClose
SetFileAttributesW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
LoadLibraryW
OpenProcess
TerminateProcess
LoadLibraryA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
ShowWindow
DestroyWindow
IsWindow
RegisterClassA
UnregisterClassA
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
SetWindowLongA
CharUpperA
CallWindowProcA
CreateWindowExA
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoInitialize
CoCreateInstance
CoUninitialize
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ