DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
61f6acdf7ecb5fef59351269fc9821bb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61f6acdf7ecb5fef59351269fc9821bb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61f6acdf7ecb5fef59351269fc9821bb_JaffaCakes118
Size
25KB
MD5
61f6acdf7ecb5fef59351269fc9821bb
SHA1
7294e9202d5a45000391e378c6e9644696a7628f
SHA256
88b101894516d6c9f9eaed3483b9e7deaef98d5dcb6d93202dd9d97dfdd40486
SHA512
4b9584ea1b79b8f5e786fc52046adcf0811632f888bbac95dc2b58b1256f77a656bb1c9a8b30fbece99000f804faa9e43b5cfe1a6d70d18f1f63515a09c9f295
SSDEEP
384:2Ugl+EQRxDbmqRgUV5vKuBVb5Ktab6BY6xkz3mhlpfxirt:2JzExDbmqRgUrdBrKts6BLF6
Checks for missing Authenticode signature.
resource |
---|
61f6acdf7ecb5fef59351269fc9821bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleFileNameA
OpenProcess
TerminateProcess
CloseHandle
GetModuleFileNameW
LoadLibraryA
SetLastError
GetLastError
LoadLibraryW
MultiByteToWideChar
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
lstrcmpA
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
SetWindowLongA
ShowWindow
CharUpperA
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
CallWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassA
IsWindow
DestroyWindow
DeleteObject
RegEnumKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ