DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4bd3848817c5f9dfd2f7a6f33f4adca0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bd3848817c5f9dfd2f7a6f33f4adca0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bd3848817c5f9dfd2f7a6f33f4adca0_JaffaCakes118
Size
28KB
MD5
4bd3848817c5f9dfd2f7a6f33f4adca0
SHA1
ea95f0e02e8c29b0d103628d20c525723771b769
SHA256
349eac701b44200ea258fc515a125119eee56a32c71ac6a8a8220f1b15d3ac34
SHA512
b7d1992da671f3653634b1703f1b0de01e80feadab5941531521526ea3064fe687b40cf27f89ebfeffcb6776617205d3c14d9532e0b7c5d085f9d6ca4f8fc749
SSDEEP
384:zvJlBLdS0qkHtwySuBBQARQkCjtegI1kqb4cdzkQxtL:zRfR5FHtbVBBQARQkCBg1F4
Checks for missing Authenticode signature.
resource |
---|
4bd3848817c5f9dfd2f7a6f33f4adca0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
InterlockedDecrement
lstrlenW
TerminateProcess
CreateEventA
CreateThread
OpenEventA
SetEvent
CloseHandle
GetModuleFileNameA
WinExec
VirtualProtect
lstrcatA
Sleep
InterlockedIncrement
SetWindowsHookExA
SetTimer
wsprintfA
CallNextHookEx
KillTimer
RegSetValueExA
RegOpenKeyA
RegCloseKey
SysFreeString
LoadRegTypeLi
SysStringLen
ord15
ord16
ord21
ord18
ord57
ord32
ord58
ord30
ord23
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
_strcmpi
free
_initterm
malloc
_adjust_fdiv
_itoa
_strlwr
??2@YAPAXI@Z
_purecall
memcpy
strcmp
strlen
memcmp
strcat
strcpy
memset
strrchr
strstr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ