DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
68c36b2fbd5f05593005f39870a307c7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68c36b2fbd5f05593005f39870a307c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68c36b2fbd5f05593005f39870a307c7_JaffaCakes118
Size
28KB
MD5
68c36b2fbd5f05593005f39870a307c7
SHA1
6ebf34506c22fed68a46e079ad5af7a779916ace
SHA256
c34ee61b0e52a4224ffcd01a229383672879b14b388be778a9382c716cc3f732
SHA512
b18b43c51ceef99ed86217cd2148e561e421fb6e953213d6db22cb33b8f1baab36b5dfd262757daa6c15d2f88b4699fbcb62ec9ac53cb0f1ffdd9a133efef212
SSDEEP
384:+H7RWLH1qKuBBQARQkOGUp0gIBWGBVVDI3H:+H7cLHENBBQARQkVUpeBW0Zu
Checks for missing Authenticode signature.
resource |
---|
68c36b2fbd5f05593005f39870a307c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
InterlockedDecrement
lstrlenW
DisableThreadLibraryCalls
GetCurrentProcess
TerminateProcess
CreateEventA
OpenEventA
SetEvent
CloseHandle
GetModuleFileNameA
WinExec
VirtualProtect
lstrcatA
CreateThread
InterlockedIncrement
Sleep
SetWindowsHookExA
KillTimer
SetTimer
wsprintfA
CallNextHookEx
RegSetValueExA
RegOpenKeyA
RegCloseKey
SysStringLen
LoadRegTypeLi
SysFreeString
ord15
ord16
ord23
ord18
ord57
ord32
ord58
ord30
ord21
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
gethostname
strcmp
_strlwr
_itoa
_adjust_fdiv
malloc
_initterm
free
memcmp
??2@YAPAXI@Z
_purecall
memcpy
strrchr
strcat
strlen
strcpy
_strcmpi
memset
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ