DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
62508777ff8b50015acaf25955f60398_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62508777ff8b50015acaf25955f60398_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62508777ff8b50015acaf25955f60398_JaffaCakes118
Size
48KB
MD5
62508777ff8b50015acaf25955f60398
SHA1
28eb6392321e47e13e226205f5938865aa4c7c64
SHA256
d92d2d389127b29e0046a3e151d76ef8338c6c1de0283b2f0c987697cb86dba5
SHA512
028b6482f8598fe0c906ed1079f8490fc16c28cba3f9c9b8ff3ee2391ee5fabbca6d9b3adce7de8cea8140c0f63c5e54c39be097ca6a1345362e8fef247e2eea
SSDEEP
768:xg/f99xQkDccdzjqE/GDIyMAPZ2+mxGwkUxDVJ9yOoYi+:m/1vQ0NdyEmIyMGTxw/tVCJY
Checks for missing Authenticode signature.
resource |
---|
62508777ff8b50015acaf25955f60398_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
Process32Next
Process32First
GetCommandLineW
WritePrivateProfileStringA
InterlockedIncrement
GetLocalTime
DeleteFileA
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
GetWindowsDirectoryA
CreateEventA
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
GetLastError
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress
SetWindowTextA
SendMessageA
CreateWindowExA
ShowWindow
IsWindow
SetTimer
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
RegisterClassExA
FindWindowExA
KillTimer
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
fopen
fwrite
_stricmp
fclose
memcmp
_purecall
rand
free
_initterm
malloc
_adjust_fdiv
_strlwr
strchr
memcpy
strrchr
strcat
memset
_access
strcpy
strlen
strstr
strcmp
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ