DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
67be6bdf80c8152c844442584f569c12_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67be6bdf80c8152c844442584f569c12_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67be6bdf80c8152c844442584f569c12_JaffaCakes118
Size
32KB
MD5
67be6bdf80c8152c844442584f569c12
SHA1
30e5f51104614701b7efa873b8225e9802952dfa
SHA256
5b0cc2546deea9e81e12a35ff70eef935ab0d8069f9926f6a15be15d036ed913
SHA512
5cfabe3f1024220ed325e63529cebec0f86085b36a324b652e2af5501c8f80768664d45141b49548c6510c48180b1b0232b5b061926c824505c3533c33cf1bf2
SSDEEP
384:+1Pp6XiGMHsOQPCZ3d8CyJ2bb92074yy4g7xMxC86T55nkz:+VpLsOQPCZ3d8CyJ2bsy4y+7Wol7i
Checks for missing Authenticode signature.
resource |
---|
67be6bdf80c8152c844442584f569c12_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
LeaveCriticalSection
WideCharToMultiByte
FreeLibrary
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
InterlockedIncrement
DisableThreadLibraryCalls
DebugBreak
HeapReAlloc
HeapFree
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
HeapCreate
GetSystemInfo
HeapAlloc
HeapDestroy
EnterCriticalSection
InterlockedDecrement
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
VarUI4FromStr
SysFreeString
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ