DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4a12542bf047ef9d20c0f22c2bed4084_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a12542bf047ef9d20c0f22c2bed4084_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a12542bf047ef9d20c0f22c2bed4084_JaffaCakes118
Size
28KB
MD5
4a12542bf047ef9d20c0f22c2bed4084
SHA1
4f21148a109ca192a3f5d87404d3910813c122c7
SHA256
96ccd816dd8c2018735b3f18dfbaeee9a785a0bc0fa7816496804720a5e62da6
SHA512
29816f9b81133ae5ffb10b04c814f554284af512b06b4aa512c1017c693e7aaa729c0842e90806e35116e623cb6ea6d38f7ecb7e875815642a45974dc59de974
SSDEEP
768:QIBsXJbcxxeENNi+lDNqdrLdbpqbKFtK:QVXVoxeENNi+lwrLi+q
Checks for missing Authenticode signature.
resource |
---|
4a12542bf047ef9d20c0f22c2bed4084_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
CreateToolhelp32Snapshot
lstrcpyA
Process32Next
CompareStringA
TerminateProcess
OpenProcess
Process32First
LoadLibraryW
SetFileAttributesW
WinExec
SetFileAttributesA
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleHandleA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
RegisterClassA
SetWindowLongA
ShowWindow
DestroyWindow
IsWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
UnregisterClassA
CallWindowProcA
CreateWindowExA
wsprintfW
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ