DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a258adf0c34022c6c555aa9d3a569b23_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a258adf0c34022c6c555aa9d3a569b23_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a258adf0c34022c6c555aa9d3a569b23_JaffaCakes118
Size
104KB
MD5
a258adf0c34022c6c555aa9d3a569b23
SHA1
33bd596ae94fd54bcc39b0806a398377eeb081e8
SHA256
cfc50a673a22cf1c53a70338c87e6049f9c188f9a9cc0c7090cbb3f9f1186622
SHA512
1e3a75297f88ff8e8262fb43b64de58a618efa2bfa5fa9c548f149256ffa9e973727ec262ff23ca55dacd775022d8c9b800cf83e7bf1c26e8ebe8afc3ec9e5a4
SSDEEP
1536:CjHPq5fRrQnmhmt7ibFloT7BB6TjCyxlT2Zec4roi:+HPoRM6HYBkjtxlT27
Checks for missing Authenticode signature.
resource |
---|
a258adf0c34022c6c555aa9d3a569b23_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetFileTime
CreateFileA
MultiByteToWideChar
lstrcpyA
WideCharToMultiByte
FileTimeToSystemTime
GetSystemTime
GetLastError
SetEndOfFile
LoadLibraryA
GetProcAddress
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
GetEnvironmentStringsW
GetEnvironmentStrings
GetWindowsDirectoryA
lstrlenW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
WriteFile
ReadFile
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
SetWindowTextA
FindWindowExA
GetWindowTextA
GetUserNameA
CoCreateInstance
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantCopy
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetGetConnectedState
InternetCloseHandle
ord30
ord32
ord15
ord23
ord58
ord18
ord21
ord16
ord31
ord57
SHGetValueA
UrlUnescapeA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ