DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
78d9c5ba8664306276158ee4ddfd38fd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78d9c5ba8664306276158ee4ddfd38fd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
78d9c5ba8664306276158ee4ddfd38fd_JaffaCakes118
Size
122KB
MD5
78d9c5ba8664306276158ee4ddfd38fd
SHA1
b71d397480af885cabe72e6234b49661db0c6c5b
SHA256
a771a3961d10a885b78c22d59e2e9506c4a99a6b89914a57ae1b6170139979d6
SHA512
4c7e1fc56e7cb904a5fd8968e1cb73bafddf78c01cc43077225207e566db6a1693811bd21121d1c909fe26deb3712a1b8892fe019559a09b279232f80df186bf
SSDEEP
3072:wOZzyv184TaNGHBBnnnWt4dOwN5140NN3CxGDobtR:wK4a4uEDnnnW+dXN5yIN32GDobtR
Checks for missing Authenticode signature.
resource |
---|
78d9c5ba8664306276158ee4ddfd38fd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleFileNameA
lstrlenA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
lstrcatA
SetEnvironmentVariableA
LoadLibraryA
lstrcpyA
MessageBoxA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
strlen
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
memset
_stat
_makepath
_splitpath
_onexit
free
_initterm
malloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE