DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6722621e4ca0c696c16c8e464ec1e33d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6722621e4ca0c696c16c8e464ec1e33d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6722621e4ca0c696c16c8e464ec1e33d_JaffaCakes118
Size
66KB
MD5
6722621e4ca0c696c16c8e464ec1e33d
SHA1
0475fa4a42527fb1f51604fae2d4a7e3d48b00d4
SHA256
67096abcd02594651ef581ca9645a4ecff8fef9a3ffdf3a13e0b201a841a4485
SHA512
240905fe1882db61ac26503d93fa7a255ea5cf033b0a3eba802fcc9dcbf5ede33e1af50f9310623f7b333e9240c02e2bf309dd9e97fd1e60ffd92f081cb30f9a
SSDEEP
384:tGx9I23zSYDKFKHOn/1lPIwDn7EEdQtvKzyt5f5Fb5KPoAvqBxhecqSSkyub+I:tGx9Z3zSX+O/1lwqDaayZKTvqB1qMS
Checks for missing Authenticode signature.
resource |
---|
6722621e4ca0c696c16c8e464ec1e33d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Process32First
SetLastError
TerminateProcess
CreateToolhelp32Snapshot
OpenProcess
GetModuleFileNameW
OutputDebugStringA
LoadLibraryA
GetModuleFileNameA
GetLastError
LoadLibraryW
lstrcpyW
SetFileAttributesW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
CompareStringA
GetModuleHandleA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
ReleaseDC
EndPaint
ShowWindow
DestroyWindow
IsWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
CreateWindowExA
UnregisterClassA
RegisterClassA
wsprintfW
LoadBitmapA
BeginPaint
CallWindowProcA
CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoInitialize
CoCreateInstance
CoUninitialize
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ