DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
461a9aa192f5ce392dcd8d588c7f9b63_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
461a9aa192f5ce392dcd8d588c7f9b63_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
461a9aa192f5ce392dcd8d588c7f9b63_JaffaCakes118
Size
48KB
MD5
461a9aa192f5ce392dcd8d588c7f9b63
SHA1
e514d4b3ffcd7cebf1c5cc39a57d83ccf645f640
SHA256
719711e5a8016f9708126a844aed0a659f36bcd2c3fbd04a89471c76c0dd05fb
SHA512
a7c075ac004c1584f56b891ad6db954edc34927f83f0eed4057653ab5dc7b486d2dca82b3ea5fa862bd90de02afa8994af5706e6fbde0acd5579e6a80f175271
SSDEEP
768:xg/f99xQkDccdzjqE/GDIyMAPZ2+mxGwkUxDVJ9yOoYhL+:m/1vQ0NdyEmIyMGTxw/tVCJY
Checks for missing Authenticode signature.
resource |
---|
461a9aa192f5ce392dcd8d588c7f9b63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
Process32Next
Process32First
GetCommandLineW
WritePrivateProfileStringA
InterlockedIncrement
GetLocalTime
DeleteFileA
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
GetWindowsDirectoryA
CreateEventA
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
GetLastError
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress
SetWindowTextA
SendMessageA
CreateWindowExA
ShowWindow
IsWindow
SetTimer
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
RegisterClassExA
FindWindowExA
KillTimer
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
fopen
fwrite
_stricmp
fclose
memcmp
_purecall
rand
free
_initterm
malloc
_adjust_fdiv
_strlwr
strchr
memcpy
strrchr
strcat
memset
_access
strcpy
strlen
strstr
strcmp
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ