DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
476ac5e222f9583cf668dd0cf24ebdb6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
476ac5e222f9583cf668dd0cf24ebdb6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
476ac5e222f9583cf668dd0cf24ebdb6_JaffaCakes118
Size
84KB
MD5
476ac5e222f9583cf668dd0cf24ebdb6
SHA1
9b6a0d19ed6f1310d64b816d77ce4ad52560ac2e
SHA256
82ad79c5a80ea3a7bb3209452374bd50fe37808094ce6e25355b5f414d041812
SHA512
21e167e01d3cab7018948d3a1acb034e98cda8d50236cff36299d7e43ca990c0a1cfd415736a0fdee55a0b3c0bfae0e8608b2ee50276cb16a77695adefdbaeab
SSDEEP
768:65sfQ5P00sEMEO5WyrkIdoSVArfT2Dbono4A1x1qQoqHJMc0Eq4K6ibjol7O97A:WFSEruTA7T0buU1x1q6IXZREl7u
Checks for missing Authenticode signature.
resource |
---|
476ac5e222f9583cf668dd0cf24ebdb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpA
WaitForSingleObject
CloseHandle
GetLastError
GetFileAttributesA
CreateProcessA
lstrcpyA
lstrlenA
LocalAlloc
lstrcpynA
InterlockedDecrement
GetModuleFileNameA
GetFileAttributesExA
TerminateProcess
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
InterlockedIncrement
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RaiseException
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ