DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
61b5d987217ebef32dc51ccf02490808_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61b5d987217ebef32dc51ccf02490808_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61b5d987217ebef32dc51ccf02490808_JaffaCakes118
Size
48KB
MD5
61b5d987217ebef32dc51ccf02490808
SHA1
f0557309dc60da58bd3f1825795e2419a67a169c
SHA256
4cdd21a2b9dd42b47da80eef1f9c30b473975d77e2b4da812917b93c846e4076
SHA512
fa05dad12a12d4a74cc2cdce859214ff15e76691e708920c28137e233e886744bb39fffd528285fe0c298d8ec2cdc9179cfe20a95390458e2ec3c3d181a83fc7
SSDEEP
768:klRTKlbWALZ9orN6dqpcihjHibbHSclA5c83YDf7fsx9AJhim4rjQX/e71Pv:kD2bWyz0NzZT0bHpG3Yr70Qim4me
Checks for missing Authenticode signature.
resource |
---|
61b5d987217ebef32dc51ccf02490808_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetLocalTime
CloseHandle
Process32Next
InterlockedIncrement
GetSystemDirectoryA
GetLastError
Sleep
CreateThread
WideCharToMultiByte
GetCurrentProcessId
GetCommandLineW
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateEventA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetModuleFileNameA
Process32First
DeleteFileA
CallNextHookEx
FindWindowExA
KillTimer
SetTimer
GetMessageA
DispatchMessageA
DefWindowProcA
IsWindow
SetWindowTextA
SendMessageA
PostMessageA
CreateWindowExA
ShowWindow
RegisterClassExA
TranslateMessage
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strchr
fopen
_stricmp
fwrite
fclose
strcat
strrchr
free
_initterm
malloc
_adjust_fdiv
_strlwr
rand
strcmp
memcmp
memcpy
??2@YAPAXI@Z
_purecall
strcpy
strstr
strlen
memset
??3@YAXPAX@Z
_access
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ