DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d0f36efc04b5b0f0d742fe34a327cc9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d0f36efc04b5b0f0d742fe34a327cc9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d0f36efc04b5b0f0d742fe34a327cc9_JaffaCakes118
Size
77KB
MD5
3d0f36efc04b5b0f0d742fe34a327cc9
SHA1
6ff418f0ff6747305c763083c3831ff2d8f1fdbd
SHA256
2eb9b882130cfaa3b7b7fecbc64bf067386964947b768852b3c849f6b8e5e1e3
SHA512
7978d007bbdebb1aa6d29b640c3b294b291c58acfad461190c429ef72f73dd3f2eacadb8ff20c2d71ca1bd6a24f9b00a6284d251201095b23171682101f1cf4d
SSDEEP
384:suy608DPm5B9jvqJd9ULsYpKrxK7B6vBbEbNPklpZhe106emR6t:suyIDPmVCJILsYMK7YvhuPQpEGm
Checks for missing Authenticode signature.
resource |
---|
3d0f36efc04b5b0f0d742fe34a327cc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
CreateToolhelp32Snapshot
Process32First
lstrcatW
lstrlenA
lstrcmpA
CloseHandle
OutputDebugStringA
GetVersion
lstrcpyW
GetModuleFileNameA
GetLastError
GetModuleFileNameW
GetFileAttributesW
LoadLibraryW
GetProcessHeap
GetModuleHandleW
FreeLibrary
CompareStringA
PulseEvent
TerminateProcess
OpenProcess
Sleep
HeapAlloc
HeapFree
RtlUnwind
wsprintfW
RegisterClassA
CallWindowProcA
IsWindow
GetClassInfoA
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
ShowWindow
AnyPopup
BeginPaint
GetForegroundWindow
SetWindowLongA
UnregisterClassA
GetWindowLongA
CreateWindowExA
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ