DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
95db02a4e99ee834cb5a4ddbc8af7020_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95db02a4e99ee834cb5a4ddbc8af7020_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
95db02a4e99ee834cb5a4ddbc8af7020_JaffaCakes118
Size
30KB
MD5
95db02a4e99ee834cb5a4ddbc8af7020
SHA1
6c0eca6bff541a8b778c8309f55a89cb994c0b23
SHA256
01b01854eb7e9ace56925db57430dfc5340ba730928924f86f91ba483fe8d653
SHA512
f60535fd3787d48e4e37c31995bb8d9a32e74224028e8d8f439535c05b1c78862458d04490eee3a028230c8a95b61fb1bcf00371fbddb941696966c4cf30604a
SSDEEP
384:OqdM5jONbc0rQWXD3IFditRLzjMeG8s7n2bSDxTzMIKTFFu/LSFl6yX:OqdMoxc0rQWz3C+zj1hCn2bmkFFuj4D
Checks for missing Authenticode signature.
resource |
---|
95db02a4e99ee834cb5a4ddbc8af7020_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineA
OpenProcess
Process32NextW
lstrcmpiW
Process32FirstW
DisableThreadLibraryCalls
Sleep
GetFileAttributesA
GetTickCount
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
GetModuleFileNameW
GetCurrentProcess
ReadProcessMemory
lstrcmpiA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
OpenThread
LoadLibraryA
QueueUserAPC
CloseHandle
GetModuleFileNameA
GetWindowsDirectoryA
GetTempPathA
CopyFileA
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
ShellExecuteA
SysStringLen
LoadRegTypeLi
SysFreeString
ord57
ord15
ord58
ord30
ord23
ord21
ord32
ord18
ord16
_adjust_fdiv
malloc
_initterm
??3@YAXPAX@Z
sprintf
strlen
memset
strcpy
strstr
_beginthread
_mbsstr
_mbslwr
memcpy
__CxxFrameHandler
_except_handler3
_purecall
??2@YAPAXI@Z
memcmp
?terminate@@YAXXZ
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ