DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
67ab59db95258360b94c3a72cb7e6bf6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
67ab59db95258360b94c3a72cb7e6bf6_JaffaCakes118
Size
14KB
MD5
67ab59db95258360b94c3a72cb7e6bf6
SHA1
7969e8990546f358e3605e00d3bafb7a78c397ad
SHA256
107c5ef0b14f95d3d9a428fd51108afb06064e3f224f77a4fd80b89ed906bf8d
SHA512
076ea837963dac5b5b65699b461963e87a5854a70e779b6fdca14834dd59c66ea4451c2ce38d5331f1bc2cbba3ae701794f0eabdf3b78a5b13a489de031ee2c2
SSDEEP
192:C3lyG2wPj5q86I+UiK4Tco6vkhAS+Kn3+yGicsVrt/RJ5wuN8:c0G2Yzl3HKuy5FRB6
Checks for missing Authenticode signature.
resource |
---|
67ab59db95258360b94c3a72cb7e6bf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryW
GetVersionExA
lstrlenW
lstrcpyW
lstrcatW
lstrlenA
MultiByteToWideChar
lstrcpyA
lstrcatA
GetModuleFileNameA
CloseHandle
SetEvent
GetProcAddress
CompareStringW
HeapAlloc
HeapFree
GetProcessHeap
ReadFile
RtlUnwind
lstrcmpA
ResetEvent
wsprintfW
CharLowerA
DestroyWindow
ShowWindow
AnyPopup
IsWindow
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ