DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
82a8032bc455aba2fd1fe42b1b74a0a0_JaffaCakes118.dll
Resource
win7-20240729-en
Target
82a8032bc455aba2fd1fe42b1b74a0a0_JaffaCakes118
Size
156KB
MD5
82a8032bc455aba2fd1fe42b1b74a0a0
SHA1
5c88626342036ee8a9f800b4544fa85d20e007eb
SHA256
3b1cf73a3310b4de9517054e8485d6974143580c9c103bde037fecef50a1a8e5
SHA512
88ef6897a975e92714241f0e6505014e4f17988bb3a52c4544cf35cd00ce2e2ed23e501c7acf1120a3c857a47c96e9fbc0c253ab6b24d10c22d0afe390fa1fd9
SSDEEP
1536:UbLd9xNb2FWWg4xcyR5JiKVxX9TRppLMFlgkXO:UPjxNb2FWWg4eM5UG/LMFlfX
Checks for missing Authenticode signature.
resource |
---|
82a8032bc455aba2fd1fe42b1b74a0a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindFirstFileA
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
DebugBreak
HeapFree
WaitForSingleObject
GetWindowsDirectoryA
CreateDirectoryA
InitializeCriticalSection
WinExec
wsprintfA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
SysStringLen
LoadRegTypeLi
SysFreeString
URLDownloadToFileA
ord18
ord15
ord16
ord21
ord57
ord32
ord58
ord30
ord23
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ