DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
62f1cf9dabc74fe1218b5287091ddacf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62f1cf9dabc74fe1218b5287091ddacf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62f1cf9dabc74fe1218b5287091ddacf_JaffaCakes118
Size
32KB
MD5
62f1cf9dabc74fe1218b5287091ddacf
SHA1
91cc78e27187c0d4cd43d895ffad337030939d1b
SHA256
474140cd9c0c65d779f5b4c0863ec6422b590be753cd787290107a5286178349
SHA512
e97ecccd3de1c322cc62bdd3e2be6e7a74ae048de6b9eb8b0cf06d508acc73b669c4b488f8052d56f0c2cd97e6323df56e63a63445754c5a32cd4b0db17f5c78
SSDEEP
384:wNKZKJsM9uOuBBQARQk74G1goB5bJz3U:wNKl5BBQARQk71ZBN9
Checks for missing Authenticode signature.
resource |
---|
62f1cf9dabc74fe1218b5287091ddacf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetEvent
OpenEventA
CreateEventA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
WinExec
VirtualProtect
lstrcatA
IsBadReadPtr
CreateThread
Sleep
GetModuleHandleA
GlobalAlloc
GlobalLock
GetCurrentProcessId
OpenProcess
ReadProcessMemory
InitializeCriticalSection
CloseHandle
SetTimer
wsprintfA
KillTimer
SetWindowsHookExA
CallNextHookEx
RegSetValueExA
RegOpenKeyA
RegCloseKey
SysFreeString
SysStringLen
LoadRegTypeLi
ord16
ord21
ord15
ord18
ord57
ord32
ord58
ord30
ord23
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
_initterm
_strcmpi
malloc
_adjust_fdiv
_itoa
_strlwr
free
??2@YAPAXI@Z
_purecall
memcpy
strrchr
strcpy
memset
strlen
strcmp
_ftol
strstr
memcmp
sscanf
strcat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ