DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
829c31b02d09a138ed26ca8d3bdc28a8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
829c31b02d09a138ed26ca8d3bdc28a8_JaffaCakes118
Size
10KB
MD5
829c31b02d09a138ed26ca8d3bdc28a8
SHA1
23de7261cd9fc27c95aba256a00f8d687d6e6e24
SHA256
0e140e72268fd1b6a3343b98160feaf7c5baf7ef6789785847712282be4bc7f9
SHA512
7a332b1bd9a58a34ff379d26ca167f5e2bd200197657a2e5f770d916f572f0ca95daba72cea793141c16ce388717afbda244e588844133b24250fac13b1e710e
SSDEEP
192:j3gffz7dI3m5AtSLYb8p/rV0EGBwKy+u/SBL66Zja//RR8:j30kD8hVRKwKyb3a0R
Checks for missing Authenticode signature.
resource |
---|
829c31b02d09a138ed26ca8d3bdc28a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryW
lstrlenW
GetVersionExA
lstrcpyW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
CompareStringW
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrcmpA
SetFileAttributesW
wsprintfW
CharLowerA
BeginPaint
EndPaint
ShowWindow
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ