DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aa5bd020019f7d93a31e4e40c846c946_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa5bd020019f7d93a31e4e40c846c946_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aa5bd020019f7d93a31e4e40c846c946_JaffaCakes118
Size
9KB
MD5
aa5bd020019f7d93a31e4e40c846c946
SHA1
257fb056abd9be09876d56ab41bf5dda50b18130
SHA256
583329f52b9167db94917db727e419310eeb38eb5f696f745b622966b22aaa1d
SHA512
024691ca0a1ceb2038a0184e42ba5185ac2327bed57b3cb1c94a5da92d9b1bb2e90783a2516faf6f04aa341e2a2f08d382a9b3e11174b3a1d736bfd757656d02
SSDEEP
192:F2BvAUa6hfHikf8tHcWrhoMC79v2Tn2e4MoAV+54y:F4vdfhfCeqa7tWn2e46
Checks for missing Authenticode signature.
resource |
---|
aa5bd020019f7d93a31e4e40c846c946_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
WideCharToMultiByte
CreateProcessA
TerminateProcess
GetCurrentProcess
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
GetCurrentProcessId
HeapFree
GetTickCount
FindClose
FindFirstFileA
CloseHandle
WriteFile
CreateFileA
lstrcpyA
lstrlenA
GetTempPathA
ReadFile
GetFileSize
DeleteFileA
HeapReAlloc
GetProcessHeap
HeapAlloc
CreateThread
DebugBreak
SetWindowLongW
IsWindowUnicode
ShowWindow
DefWindowProcA
EnumWindows
CallWindowProcA
GetWindowThreadProcessId
GetClassNameA
SetWindowLongA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ