DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a0bb2fa1118ded15ef5f68946eaf883b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a0bb2fa1118ded15ef5f68946eaf883b_JaffaCakes118
Size
10KB
MD5
a0bb2fa1118ded15ef5f68946eaf883b
SHA1
ad6e2d83117ecaf83fed1feb3a2f11c88c5b6871
SHA256
70a99e70123691b351fc82da184f373d8768363094769e5fce4d72d1258e72ef
SHA512
665d74a497b1afae34080141e3d0052c02955f130fc422ddb57176125c51e279aacf0b93dbf3d3bacbc0181cc59a4acec8ac51939caa45a6cb3fe6299c007bde
SSDEEP
96:YdiCTuOiTtW9SQhq7pjBGhTe3Q/QltHa92EEMlJwBJwowDEK8f1j8e29nq57Aiup:5nQoEhig/I49IswADEKf9nq9Aic
Checks for missing Authenticode signature.
resource |
---|
a0bb2fa1118ded15ef5f68946eaf883b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHSetValueW
SHDeleteKeyW
SHGetValueW
??3@YAXPAX@Z
wcscpy
??2@YAPAXI@Z
srand
free
_initterm
malloc
_adjust_fdiv
rand
wcsstr
wcslen
memcmp
wcscat
??1type_info@@UAE@XZ
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ