DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6f26ee3c4a72894a243e2f5e39b2540b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f26ee3c4a72894a243e2f5e39b2540b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f26ee3c4a72894a243e2f5e39b2540b_JaffaCakes118
Size
39KB
MD5
6f26ee3c4a72894a243e2f5e39b2540b
SHA1
764cb287808d4c0db10143a1de7a3fc5977d4188
SHA256
7ffe977eb1c3590205eb9786052596b46ed15a5154088e26f709e2440404e502
SHA512
a0e1ac561b66789befa43b1574964713476f32712914b55fa621af3875a558d1e8482f49bbf86ab5a8c5db204333778d5b66234438f33cf6111888f7c1cb76ba
SSDEEP
768:Y68qVoHBnz2/zxor16bbAaPxbHLP5r6KkD+CUXMSKNjFEKuoNsRWx0h4UB2BRFMX:JBoHBnS/zxor16bbAaPxbHLP5r6KkD+T
Checks for missing Authenticode signature.
resource |
---|
6f26ee3c4a72894a243e2f5e39b2540b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SendMessageA
MessageBoxA
MessageBeep
GetForegroundWindow
GetClassNameA
FindWindowExA
wsprintfA
ShellExecuteA
lstrlenA
lstrcpynA
CloseHandle
CompareStringA
CreateFileA
CreateProcessA
CreateThread
DeleteFileA
GetModuleFileNameA
GetStartupInfoA
GetSystemDirectoryA
GetSystemTime
GetTickCount
GetWindowsDirectoryA
GlobalAddAtomA
GlobalFindAtomA
lstrcmpiA
LocalFree
ReadFile
SetFilePointer
Sleep
SystemTimeToFileTime
WriteFile
lstrcatA
lstrcmpA
LocalAlloc
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ