DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3f6d08804b7549e7944bf288ae9b3d9a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f6d08804b7549e7944bf288ae9b3d9a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f6d08804b7549e7944bf288ae9b3d9a_JaffaCakes118
Size
48KB
MD5
3f6d08804b7549e7944bf288ae9b3d9a
SHA1
29fdfafe9a27c5f42c6deb35751a84ad2fbd1378
SHA256
907880f6f86378f2990c8a75a63d36b90ffc3b56a75931005869e34d974fd718
SHA512
ff7752dd948bbe8d9420c92dedc480830a13738fa55937d3b8c205ada6c6507317aedd0f883b3f2c6c974db8373261580b9168fd4218969ddfd9add335618428
SSDEEP
768:dJc4EcJBl5gBJBjE7gsyYXZ6rFtFWClOFVhCDkbHSOYSbyW5mPCYoX2:dJ0anGf27gsym+UClOFVhCD2YSbyW5lG
Checks for missing Authenticode signature.
resource |
---|
3f6d08804b7549e7944bf288ae9b3d9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetModuleFileNameA
DeleteFileA
GetSystemDirectoryA
FreeLibrary
GetCommandLineW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
EnterCriticalSection
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
CreateEventA
GetCurrentProcessId
Sleep
WideCharToMultiByte
Process32Next
Process32First
GetLocalTime
GetWindowsDirectoryA
LeaveCriticalSection
GetLastError
WritePrivateProfileStringA
LoadLibraryA
GetProcAddress
HeapDestroy
CreateThread
DefWindowProcA
RegisterClassExA
IsWindow
SetWindowTextA
SendMessageA
CreateWindowExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowExA
KillTimer
SetTimer
PostMessageA
ShowWindow
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
fopen
_strlwr
fwrite
fclose
strcmp
strstr
memcmp
free
_initterm
malloc
_adjust_fdiv
_stricmp
strchr
_purecall
strcpy
strrchr
??2@YAPAXI@Z
memset
sprintf
rand
strlen
memcpy
strcat
??3@YAXPAX@Z
_access
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ