DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
45faa5133249576f114a6ccb3e52b850_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45faa5133249576f114a6ccb3e52b850_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45faa5133249576f114a6ccb3e52b850_JaffaCakes118
Size
26KB
MD5
45faa5133249576f114a6ccb3e52b850
SHA1
3c2f0b149d9df906c339db357b3202def9c6262c
SHA256
28635fda0c302787c7a1a8e5436d55d25aefd5b86eccc7bc0d056475144c4269
SHA512
c07c7a856dc667a418e7cdcee2429b6b770939337c2e41b37732233d644be897b201a093ae59eb8b21ae219f744fb2e72b308fbb6867924af432e3ddd5586dcb
SSDEEP
192:HwGoxqSz/8VahTYdV1oW04q38+MlA80tSpVKnV09KvGBnVTWlS+pHi2dsa86KECy:LoxgCTeoWPG9vs/KV6KvKVTeHm6JC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45faa5133249576f114a6ccb3e52b850_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetSystemDirectoryW
lstrlenW
GetProcAddress
MultiByteToWideChar
GetVersionExA
lstrlenA
GetCurrentThreadId
ResetEvent
GetProcessHeap
GetModuleHandleA
FreeLibrary
lstrcatA
lstrcpyA
LoadLibraryA
CompareStringW
RtlUnwind
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
wsprintfW
CharLowerA
GetTopWindow
IsWindow
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE