DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
70c6bd2a1614f95534e40ad37f6a8492_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70c6bd2a1614f95534e40ad37f6a8492_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
70c6bd2a1614f95534e40ad37f6a8492_JaffaCakes118
Size
36KB
MD5
70c6bd2a1614f95534e40ad37f6a8492
SHA1
3f33a3da42bb36b3f7a0bc15563170240d404b52
SHA256
c20f9edc5e6d6c9ad579155e43da1ad4ea0295b97a3f619df7a1945f4b4cef41
SHA512
eec08ace58f1a55b368bcbad3366329d1c21240e8b378d91c0f5ba89d7f103daa8558c163934cc12bbf0333709a366ee998ca6ad98c57d42bd42f423e0591285
SSDEEP
384:O7/UNQ+rshNnH0PZXmX9pc0UTwuy7JkDic+UgC4vkElO7shJC8PiFZiQ/Pnplf:w/UNvrssPZ2X80OH48EE7shJC8P0Xnp5
Checks for missing Authenticode signature.
resource |
---|
70c6bd2a1614f95534e40ad37f6a8492_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
SetEvent
GetTickCount
CreateEventA
GetUserDefaultLangID
lstrlenW
MultiByteToWideChar
GetShortPathNameA
GetModuleFileNameA
InterlockedIncrement
CloseHandle
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DebugBreak
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
lstrcpynA
GetFileAttributesA
GetDriveTypeA
DeleteCriticalSection
InitializeCriticalSection
VirtualQuery
VirtualProtect
GetModuleHandleA
lstrcmpiA
IsBadReadPtr
GetVersionExA
lstrlenA
InterlockedDecrement
lstrcpyA
wsprintfA
wvsprintfA
FindWindowExA
MsgWaitForMultipleObjects
PeekMessageW
GetDlgItem
CharNextA
TranslateMessage
DispatchMessageA
ShowWindow
DialogBoxParamW
GetWindow
SetForegroundWindow
IsWindow
PostMessageA
RegisterWindowMessageA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegOpenKeyExA
RegCloseKey
StrRChrA
CoUninitialize
CoInitialize
CoCreateInstance
VariantInit
VariantClear
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ