DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
86012bc4cd6cd765e35c802a294b4aca_JaffaCakes118.dll
Resource
win7-20240705-en
Target
86012bc4cd6cd765e35c802a294b4aca_JaffaCakes118
Size
10KB
MD5
86012bc4cd6cd765e35c802a294b4aca
SHA1
5d854229e71f289f62b812dc580edf862fcecda6
SHA256
2fed37b30746bdaa58495986b53b6c67462b57918e5c6e629d5e1b9121b5aa6f
SHA512
1ca0780dee2eee8b4ef8c7a7f02585f0610a250c0aadf0441861c5512441b8efd7e225d53946e7639a5e4ab87c44cf9e6faf2b930978522ee3140d403b4228a2
SSDEEP
96:3OlTuOiThS9SQh2zVjBGhTe3QEltHa92EEMysPJwRJwb7E+2iTFf1j8e29nqQg9c:3zvQIEhigk49I0RgW7E+E9nqPAic
Checks for missing Authenticode signature.
resource |
---|
86012bc4cd6cd765e35c802a294b4aca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHSetValueW
SHDeleteKeyW
SHGetValueW
??3@YAXPAX@Z
wcscpy
??2@YAPAXI@Z
srand
free
_initterm
malloc
_adjust_fdiv
rand
wcsstr
wcslen
memcmp
wcscat
??1type_info@@UAE@XZ
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ