DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
63f1909531c18044835fb4ac1e62243c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63f1909531c18044835fb4ac1e62243c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63f1909531c18044835fb4ac1e62243c_JaffaCakes118
Size
33KB
MD5
63f1909531c18044835fb4ac1e62243c
SHA1
e1b7629209d2c779e0bf385c797df4bf0dae956e
SHA256
146c89a25f9ca6c546ba7482571ae6de52162c3d017f723448f147f735cc2302
SHA512
871e0fb8ecf1474d4716d567b999c444d75ab86d94a68b034661b1e1b49d520bc8684232dbb561786b225359c128e417751a366999d01172e81a8a7385100b49
SSDEEP
768:I63Vv7u5XcnRaZoxZ5DV1JCA4/4T5msggpk9VhWX:I6VaeRaaZxfEAvT5msgikrhW
Checks for missing Authenticode signature.
resource |
---|
63f1909531c18044835fb4ac1e62243c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetLastError
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetModuleFileNameA
RaiseException
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
lstrcatA
lstrcpyA
GetCurrentThreadId
GetTickCount
GetCurrentProcessId
QueryPerformanceCounter
ExitProcess
HeapReAlloc
DebugBreak
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
lstrcpynA
lstrcmpiA
IsDBCSLeadByte
DisableThreadLibraryCalls
FreeLibrary
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
HeapFree
HeapSize
HeapAlloc
GetProcessHeap
CharNextA
MessageBoxA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ