DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8b0e2a8b9c4e5c006f86420a6de3a197_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8b0e2a8b9c4e5c006f86420a6de3a197_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8b0e2a8b9c4e5c006f86420a6de3a197_JaffaCakes118
Size
104KB
MD5
8b0e2a8b9c4e5c006f86420a6de3a197
SHA1
fbc21282e1981d775288027dd5f74a7aaefccf56
SHA256
7c70888fa9a000d0945470dafd6f4b6803677824b07eb28b1cce7f4a5308d26b
SHA512
f618533048092407f97794496c5c9126c48d50314ee721c49cab1753fb0c4e3918520c82454cdc8f91ad15c4dbd980c23ff16f7b2c5f972b4bf91e5d19ce44cc
SSDEEP
3072:65XPjBx6WWfUWgvS9rv22f5NsVerc3/chrvmBWTOn1+6VsXpF:6FA5NsYCchrmWTsEmsZF
Checks for missing Authenticode signature.
resource |
---|
8b0e2a8b9c4e5c006f86420a6de3a197_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
FreeLibrary
SizeofResource
GetModuleHandleA
GetShortPathNameA
LoadResource
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
FindResourceA
EnterCriticalSection
lstrcpyA
lstrcatA
LoadLibraryA
InterlockedDecrement
CompareStringA
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedExchange
SetLastError
CloseHandle
lstrlenA
OpenMutexA
DeleteCriticalSection
GetLastError
InterlockedIncrement
HeapDestroy
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
MessageBoxA
LoadStringA
DefWindowProcA
UnregisterClassA
SetTimer
CreateWindowExA
GetClassInfoA
RegisterClassA
DestroyWindow
CharNextA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegSetValueExA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
OleRun
RegisterTypeLi
LoadTypeLi
SysFreeString
SysAllocString
VariantClear
VariantCopy
VarUI4FromStr
malloc
realloc
free
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
_adjust_fdiv
_initterm
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ