DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
83f0f627f725cbc73ff60ed32e34100d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83f0f627f725cbc73ff60ed32e34100d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
83f0f627f725cbc73ff60ed32e34100d_JaffaCakes118
Size
48KB
MD5
83f0f627f725cbc73ff60ed32e34100d
SHA1
9665d0682d2441416a9b16e43bda0b5a36cb3cba
SHA256
e7d6bc1481cc48a389062df5145a061c4838a312571517b1b8b453b1fce02faf
SHA512
4b14c3f49c0ae97abd198d8988e8783224f72a10385e5aa9d5348d44e9ec445b0b9c2e398bac16ff3af67bdc842a57e016c68f794e9d580137de492505c17658
SSDEEP
768:37NHnVMkUrZ2miTQXiEXyYLCCxFze1C4gokbOZz:LNHVMkukTWVlhokb6z
Checks for missing Authenticode signature.
resource |
---|
83f0f627f725cbc73ff60ed32e34100d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemInfo
HeapCreate
lstrlenW
MultiByteToWideChar
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
HeapAlloc
lstrcpyA
lstrcatA
SetFilePointer
WriteFile
LockResource
CreateFileA
CloseHandle
ReadFile
GetFileSize
GetTempPathA
DebugBreak
HeapReAlloc
HeapFree
GetStringTypeA
LCMapStringW
lstrlenA
InterlockedDecrement
EnterCriticalSection
GetModuleFileNameA
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LoadLibraryA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetStringTypeW
CharNextA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ