DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3be50931f86213b494775d062b3c3360_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3be50931f86213b494775d062b3c3360_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3be50931f86213b494775d062b3c3360_JaffaCakes118
Size
39KB
MD5
3be50931f86213b494775d062b3c3360
SHA1
6a084a9f4ec3a984ded890d2ef0005bf8925db3d
SHA256
b226900e6bb7703a1ca8f143efd8331916c93ac2ef8359a73d6d751451d92cf9
SHA512
206a52a54fd1a71c8287b0744f1a312c40b9d1cc4a386593d23b960fbf8fec7b72df80db1dcc4460e99dc65ee59dcb6dab0ddfd129d8f32212f84b447590b3b4
SSDEEP
768:WMJzKom9AKQZ+5Usr4+2+FXLLtq8CsEV0A3DGNxSMVV1w6vKHv:7JzVm9AKQ+5BN/FvKsEOaGxSQ6
Checks for missing Authenticode signature.
resource |
---|
3be50931f86213b494775d062b3c3360_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrW
StrRChrA
StrCmpNA
StrStrW
StrCatW
StrCmpIW
StrToIntA
StrCmpW
StrStrIA
lstrcmpA
CreateThread
CreateMutexA
ResetEvent
ExitThread
GetTickCount
Sleep
WaitForSingleObject
GetModuleFileNameW
SetFilePointer
HeapFree
GetProcessHeap
HeapAlloc
lstrcatA
lstrcpyA
InitializeCriticalSection
HeapDestroy
VirtualProtect
DeleteFileW
CreateProcessW
GetBinaryTypeW
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetLastError
CreateDirectoryW
GetTempPathW
lstrcpynA
GetProcAddress
FreeLibrary
LoadLibraryA
HeapCreate
GetUserDefaultLangID
GetLocaleInfoA
GetSystemDefaultLangID
GetVersionExW
Process32NextW
WideCharToMultiByte
Process32FirstW
CreateToolhelp32Snapshot
CreateProcessA
GetModuleFileNameA
CreateFileA
MultiByteToWideChar
ReadFile
GetFileSize
GetTimeFormatA
GetDateFormatA
FindClose
FindNextFileA
DeleteFileA
UnmapViewOfFile
FindFirstFileA
PulseEvent
CreateEventA
GetModuleHandleW
MapViewOfFile
CreateFileMappingW
LeaveCriticalSection
MoveFileA
EnterCriticalSection
GetModuleHandleA
CreateWindowExW
GetWindowRect
SetTimer
wsprintfA
GetSystemMetrics
DestroyWindow
DispatchMessageW
GetClientRect
ShowWindow
DefWindowProcW
GetMessageW
TranslateMessage
RegisterClassExW
ShellExecuteA
SHGetSpecialFolderPathA
OleInitialize
CoCreateInstance
CoInitializeEx
SysFreeString
SysAllocStringLen
VariantInit
SysAllocString
SafeArrayUnlock
SafeArrayLock
SysAllocStringByteLen
VariantClear
VariantCopy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ