DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
458b8381fe3407bfb1a8a4e4aaeaa115_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
458b8381fe3407bfb1a8a4e4aaeaa115_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
458b8381fe3407bfb1a8a4e4aaeaa115_JaffaCakes118
Size
186KB
MD5
458b8381fe3407bfb1a8a4e4aaeaa115
SHA1
9258a6a492071f8934fee10ec44a138b647d2e0a
SHA256
e1be89836032faa3a22920ca2a5c62ce32aeb0a0421523614c0625cf82c5d372
SHA512
c0cd97248f89ee37ba0235ddf9a4d035a1dc42cfcba7dc3144bb8c6f4e57ffe80543dd62c0b8de4d08999aa4846702223da67d3e631140e605630d69e65928c1
SSDEEP
3072:pybdufi0u58qs7q00JMOqzFXUXfUyIMToPTIzQqIEkDLTAHnYhEriYnJUhzv1iJd:4Ruap5H20JMOqzFXUXNoUzMgnYhrzji/
Checks for missing Authenticode signature.
resource |
---|
458b8381fe3407bfb1a8a4e4aaeaa115_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wsprintfA
CreateFileA
GetModuleFileNameA
GetFileSize
CloseHandle
WriteFile
GetSystemDirectoryA
GlobalAlloc
ReadFile
lstrcat
lstrcpy
SetFilePointer
MultiByteToWideChar
lstrlen
ShellExecuteA
CoTaskMemFree
CoTaskMemAlloc
IsEqualGUID
LoadRegTypeLi
SetErrorInfo
LoadTypeLibEx
UnRegisterTypeLi
RegOpenKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ