DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8aa9d25736782de57c62429708e00739_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8aa9d25736782de57c62429708e00739_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8aa9d25736782de57c62429708e00739_JaffaCakes118
Size
81KB
MD5
8aa9d25736782de57c62429708e00739
SHA1
efa5be62bc7c6ae7a7fd909807bf3e7e0c2d9c63
SHA256
01b857057d91d36b334da60697f8ddfd1eabcf7f9444ed4f3193d19664587cad
SHA512
62af00b6c7f505e65d5ba84f9c14b03b75cd290abfe6fab26fe56ef5cfc2b120b98032e5d3065d55d97ba1be38a4b6e5cae5ef05eb4d5428f306bbaf29942f56
SSDEEP
384:d5qPZ5InmrX4VRKFKYQCEbeOIlcehe106emRXOhA16:derImT4XKHj5OUcJGmRXCs
Checks for missing Authenticode signature.
resource |
---|
8aa9d25736782de57c62429708e00739_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
GetModuleHandleA
GetVersion
CompareStringA
CreateToolhelp32Snapshot
Process32First
CloseHandle
lstrcpyA
GetModuleFileNameA
lstrcatA
lstrcpyW
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
GetModuleFileNameW
GetFileAttributesW
GetModuleHandleW
LoadLibraryW
lstrlenA
lstrcmpA
RtlUnwind
UnregisterClassA
RegisterClassA
CallWindowProcA
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
wsprintfW
SetWindowLongA
BeginPaint
GetWindowLongA
CreateWindowExA
ShowWindow
GetClassInfoA
IsWindow
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ