DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
59c4999ffe37b9dfc4488aa8f17e20ed_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59c4999ffe37b9dfc4488aa8f17e20ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59c4999ffe37b9dfc4488aa8f17e20ed_JaffaCakes118
Size
212KB
MD5
59c4999ffe37b9dfc4488aa8f17e20ed
SHA1
68c7374f0af7c268318eaf94e8a2b474ade9e4e2
SHA256
b0bd46ca9cbce5f1a65b5bce51f142c6720771fd9cff87273dfd66f6692c62d2
SHA512
60ea5ea78ad2cacaa497118e00612790be0647da878ed7b9edef4c3fe75c64f457c06a287ae06495183b65335db494539687a5d542c5739ae04daf6bcedbd9ce
SSDEEP
3072:PAxOpTyelGJ7TRcOn3Pix+9o52K9o3NdP0P/bH6X6xUiQTHjFAz:PAxZe0XrS2K9ysTW6xUx
Checks for missing Authenticode signature.
resource |
---|
59c4999ffe37b9dfc4488aa8f17e20ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ht_getAviInfo
ht_avi2mpeg
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3738
ord561
ord815
ord446
ord743
ord5500
ord1134
ord1132
ord1131
ord6354
ord6440
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord2985
ord3798
ord4837
ord6375
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord5277
ord3402
ord4627
ord567
ord2135
ord818
ord1949
ord1116
ord1168
ord1105
ord860
ord1138
ord2915
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3136
ord4465
ord3259
ord3147
ord2982
ord1799
ord823
ord4274
ord540
ord858
ord800
ord2729
ord2730
ord6467
ord2727
ord4003
ord4226
ord2818
ord1200
ord614
ord825
ord290
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord4441
ord3081
ord1243
ord1182
ord342
ord1577
ord1575
ord1176
ord5290
ord4160
??1type_info@@UAE@XZ
malloc
_adjust_fdiv
free
_onexit
__CxxFrameHandler
strrchr
_splitpath
_ftol
__dllonexit
_initterm
LocalFree
GetDiskFreeSpaceA
GetProcAddress
Sleep
MultiByteToWideChar
lstrlenA
lstrcpyA
GetModuleHandleA
GetTempPathA
GetModuleFileNameA
LocalAlloc
wsprintfA
EnableWindow
SendMessageA
PostMessageA
CoInitialize
CoCreateInstance
CoUninitialize
AVIFileExit
AVIStreamRelease
AVIStreamReadFormat
AVIStreamInfoA
AVIFileGetStream
AVIFileInfoA
AVIFileOpenA
AVIFileInit
AVIFileRelease
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ