DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ddfbf3decf3e026a47fd993aa00c5d2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ddfbf3decf3e026a47fd993aa00c5d2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ddfbf3decf3e026a47fd993aa00c5d2_JaffaCakes118
Size
48KB
MD5
3ddfbf3decf3e026a47fd993aa00c5d2
SHA1
c7c8700f9188a5f613e2cdb93f583ec3ee5fc963
SHA256
3fc52f625bef68dce78a05444e8abb50b4b2bd0b22d7876d2ac4541fdd03d413
SHA512
39ad6727020a6ab1c36908be709ede8f2560717e9c64fc7371a72812ced5cee7aa8befa1098843fa972c992ba726896bc892a9793672a38cd154577bae72b3c4
SSDEEP
768:hXtehDLhoALZQ4E2tup9n4ZVH5nvKwoJlba3ALKzBOwgvDM8VzPQaICQB:hXtKDLhoyZEfp94v5veBFKVOS8NPgCQB
Checks for missing Authenticode signature.
resource |
---|
3ddfbf3decf3e026a47fd993aa00c5d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
GetProcAddress
InterlockedIncrement
GetCurrentProcessId
GetCommandLineW
GetLastError
CreateEventA
WritePrivateProfileStringA
GetSystemDirectoryA
GetWindowsDirectoryA
Sleep
CreateThread
WideCharToMultiByte
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
Process32First
Process32Next
CloseHandle
LoadLibraryA
DeleteFileA
CreateWindowExA
ShowWindow
SetWindowTextA
SendMessageA
KillTimer
FindWindowExA
PostMessageA
DefWindowProcA
CallNextHookEx
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
SetTimer
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strcmp
strchr
_strlwr
fopen
fwrite
fclose
strcat
free
_initterm
malloc
_adjust_fdiv
_stricmp
rand
strrchr
strstr
strlen
memcmp
memcpy
memset
_purecall
strcpy
sprintf
_access
??2@YAPAXI@Z
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ