DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4139442c3477b7aa3b960c23e357580d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4139442c3477b7aa3b960c23e357580d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4139442c3477b7aa3b960c23e357580d_JaffaCakes118
Size
60KB
MD5
4139442c3477b7aa3b960c23e357580d
SHA1
0a4846537e063c69fd284c9e2eddcba594562685
SHA256
dbbf95f1fff7f62ed5b04b8c438bacf16cd382fcdbc7d4c2006ca09001efaf56
SHA512
5fb038d03afbc0889bf4af7c973972e347462929d4c460f7f620132788921dd5daae852ed66bcbe306b49936924353e5ffbecad03f04d85406163fa77cdc118e
SSDEEP
1536:2cp6jv5nbWLEpCqMqUvVzJxJy5ZhMkj2M:2cp6jv5bLptrUxGZdjb
Checks for missing Authenticode signature.
resource |
---|
4139442c3477b7aa3b960c23e357580d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathFileExistsA
PathFileExistsW
HttpSendRequestA
CloseHandle
GetFileSize
CreateFileA
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
GetSystemDirectoryA
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringW
WriteFile
CreateFileW
GetSystemDirectoryW
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
GetCurrentThreadId
DeleteFileW
CreateProcessA
GetWindowsDirectoryA
MoveFileA
GetLocaleInfoA
GetSystemDefaultLCID
GetVersionExA
GetLastError
CreateMutexA
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualProtect
VirtualQuery
GetCurrentProcess
DispatchMessageA
TranslateMessage
GetMessageA
PostThreadMessageA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoTaskMemFree
StringFromCLSID
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantClear
time
srand
rand
tmpnam
free
strtok
_unlink
wcslen
rewind
wcsstr
wcscat
swprintf
fread
_wcsicmp
sscanf
fopen
fprintf
fwrite
fflush
fclose
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
strstr
??3@YAXPAX@Z
div
malloc
GetModuleInformation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ