DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a1984f57b88711255ecb368481f0ad13_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1984f57b88711255ecb368481f0ad13_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a1984f57b88711255ecb368481f0ad13_JaffaCakes118
Size
228KB
MD5
a1984f57b88711255ecb368481f0ad13
SHA1
470d0531dbeb98ba2b9c04ba75b2b5674df96ced
SHA256
433789d5472731ae982ae42583b508b1c8e4c220061e68fa187f0ff44049bfb8
SHA512
f0de67f8f53a4b3f3a940f6af222627e78d0dd8743f2b89329018d232131f3bbee995c571af6d03f9e8a14490c44d8094ecc72c66338ccd08fc78e07099e0630
SSDEEP
6144:gavn9bduWwITIhlwug39NeeQf218co6r4tz:gavLr7Ajg3neeQH
Checks for missing Authenticode signature.
resource |
---|
a1984f57b88711255ecb368481f0ad13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MulDiv
FreeLibrary
LoadLibraryA
lstrcpynA
SizeofResource
CreateEventA
CloseHandle
CompareStringA
GetModuleHandleA
GetWindowsDirectoryA
FindResourceA
GetLastError
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LoadResource
LockResource
GetCurrentProcess
FlushInstructionCache
HeapAlloc
GetModuleFileNameA
lstrlenA
InterlockedExchange
IsBadReadPtr
IsBadCodePtr
DisableThreadLibraryCalls
GetProcessHeap
HeapFree
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemDirectoryA
CreateDialogParamA
SetRect
GetDlgItemInt
SetDlgItemInt
ShowWindow
WinHelpA
GetDC
ReleaseDC
GetDialogBaseUnits
IsWindow
DestroyWindow
IsDialogMessageA
MoveWindow
GetTextMetricsA
SelectObject
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPointA
DeleteObject
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler
SysAllocString
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysAllocStringLen
ord66
ord30
ord65
ord18
ord22
ord64
ord49
ord32
ord23
ord61
ord15
ord44
ord43
ord31
ord58
ord53
ord52
ord196
ord116
ord125
ord197
ord103
ord106
ord122
ord152
ord150
ord228
ord100
ord196
ord256
ord147
ord105
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
__dllonexit
__CppXcptFilter
_onexit
?terminate@@YAXXZ
memcpy
strlen
??_U@YAPAXI@Z
_resetstkoflw
??2@YAPAXI@Z
_except_handler3
_CxxThrowException
__security_error_handler
memcmp
memset
free
_purecall
??3@YAXPAX@Z
??_V@YAXPAX@Z
malloc
__CxxFrameHandler
_mbsnbcpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE