DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
83209330befccaf1e527ac4de328c92b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83209330befccaf1e527ac4de328c92b_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
83209330befccaf1e527ac4de328c92b_JaffaCakes118
Size
104KB
MD5
83209330befccaf1e527ac4de328c92b
SHA1
fade70a0b10e6c8e9ae25efa1d543e813d3b2af3
SHA256
d0f8023c048c74fc4e1da4724b0c314d96a17804ba9ecd8476d645409505f2bf
SHA512
57b20fbc64b409b01561c874e96ab0f82c20268eaa3603bf97d0927a302ab4cb287b0befc15be807da95a33f169e55a256c4ecb78fb298aa25c04c35e4295826
SSDEEP
1536:wzAoGs4DwYwtBv2nxJX6AnDn9MQMQYZjJVrUG8ZF:RoGs4DUtBKX6AD9M1Xw
Checks for missing Authenticode signature.
resource |
---|
83209330befccaf1e527ac4de328c92b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
HeapCreate
DisableThreadLibraryCalls
DebugBreak
HeapFree
lstrlenA
GetStringTypeA
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetTempPathA
GetTickCount
CreateFileA
SizeofResource
WriteFile
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenW
DeleteFileA
memcmp
memcpy
strstr
strlen
strcat
SHDeleteKeyA
SHGetValueA
SHSetValueA
CharLowerBuffA
wvsprintfA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
CLSIDFromString
LoadRegTypeLi
SysStringLen
SysFreeString
ord23
ord15
ord18
ord57
ord16
ord32
ord58
ord30
ord21
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ