DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a1984515e6120612765075612bbe2eaf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a1984515e6120612765075612bbe2eaf_JaffaCakes118
Size
12KB
MD5
a1984515e6120612765075612bbe2eaf
SHA1
d403c50c2bd304192451e9d412d0bfbfcbcdeffc
SHA256
eec3f3c567c5bce7a20569c163c1dd128889e80ebf907fc2f610532636c3ec79
SHA512
5b4b10e2d02f8923c44787bc8d8d75496a8cac726d89f4670f72e172dc065404b355fcefc8f46bb235df4f7ba704facd07f2f30bf08ed5dfe4fad2f00402b130
SSDEEP
192:M8zyAEQ4A1+WQXVYBq8tQQvlqYCKqqAe8T9TwC5:MZPXVYBBtQCIYCmi9MC5
Checks for missing Authenticode signature.
resource |
---|
a1984515e6120612765075612bbe2eaf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteKeyW
SHSetValueW
SHGetValueW
free
??1type_info@@UAE@XZ
malloc
_adjust_fdiv
??2@YAPAXI@Z
wcscpy
??3@YAXPAX@Z
srand
rand
wcsstr
wcslen
memcmp
wcscat
memcpy
_initterm
wsprintfW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
ReadFile
InterlockedDecrement
InterlockedIncrement
SetFilePointer
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ