DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
aa9ed940876efd4417528c31246934fa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa9ed940876efd4417528c31246934fa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aa9ed940876efd4417528c31246934fa_JaffaCakes118
Size
44KB
MD5
aa9ed940876efd4417528c31246934fa
SHA1
962cdc320754bc1a308ba96903c29a7450dd338a
SHA256
2d40285541840457b8761867e18468a811ec97547159555081046ffa20aa285a
SHA512
d2d162ff3aaad6dca5756d0de437ef5549fdd928581295f03995beb3c70eb0ec85606b07696f429916e50de1feb5464b172b251383192146e1437d8f828cfdde
SSDEEP
768:6H85Es8bC7/af1mAX9fOA8/s/G6XNO4oU4CT8ebreDEpJOx+nDAB:285EssC7CFNNR4o8eZpJq+8B
Checks for missing Authenticode signature.
resource |
---|
aa9ed940876efd4417528c31246934fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
DeleteFileA
CloseHandle
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
DebugBreak
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
CopyFileA
lstrcatA
GetFileAttributesA
lstrcmpA
lstrcpynA
ReadFile
GetFileSize
MoveFileA
GetShortPathNameA
GetWindowsDirectoryA
SetLastError
SetFileAttributesA
SetEndOfFile
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
CreateFileA
lstrcmpiA
MultiByteToWideChar
lstrlenA
lstrcpyA
lstrlenW
GetDriveTypeA
WideCharToMultiByte
GetWindowRect
SendMessageA
GetParent
SetPropA
GetPropA
PostMessageA
CallWindowProcA
RemovePropA
wsprintfA
SetWindowLongA
RegOpenKeyExA
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
StringFromGUID2
CoInitialize
CoTaskMemRealloc
CoFreeUnusedLibraries
CLSIDFromProgID
CoCreateInstance
CoUninitialize
SysAllocString
SysAllocStringLen
SysFreeString
VariantChangeTypeEx
VariantClear
VariantInit
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ