DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a3dbf919fcaa0fc8a0dbf5fcb9ac04a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a3dbf919fcaa0fc8a0dbf5fcb9ac04a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5a3dbf919fcaa0fc8a0dbf5fcb9ac04a_JaffaCakes118
Size
32KB
MD5
5a3dbf919fcaa0fc8a0dbf5fcb9ac04a
SHA1
1c9ba0cffbbd33c749b0c77c2324fa5b6c6710f6
SHA256
13bad21c88e415ceba274e18968c2be23107d8f2f520a1ca711588189c33e736
SHA512
f5e851b5785bfd089c7f7e7d93ebea049f139bd12145329951df9fe2c49a1f55395b66b749e6d2aeb9dbf28d713ec1603aa03182d83d0d377597a5bf48fafefe
SSDEEP
192:3h1E0C7IfWwrHIvQ1mM0uAP3lTBKTBc9zK8nE0np9r0XI:3HlWaINM0B3l9MBc9zK2E0p96
Checks for missing Authenticode signature.
resource |
---|
5a3dbf919fcaa0fc8a0dbf5fcb9ac04a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord16
ord15
ord30
ord58
ord57
ord18
ord32
ord23
ord21
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
HeapCreate
InterlockedDecrement
GetVersionExA
MultiByteToWideChar
GetLastError
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
lstrlenW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SysFreeString
SysStringLen
LoadRegTypeLi
memcpy
wcslen
wcsstr
memset
wcsncpy
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
_snwprintf
strlen
wcschr
_wcsicmp
free
iswalpha
swscanf
iswdigit
_adjust_fdiv
_initterm
malloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ