DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b0f09a706cc2bc1bbaf235abc89d22b5_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b0f09a706cc2bc1bbaf235abc89d22b5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0f09a706cc2bc1bbaf235abc89d22b5_JaffaCakes118
Size
43KB
MD5
b0f09a706cc2bc1bbaf235abc89d22b5
SHA1
1cd320f225874bddad42efbdb27fd43b1db2b3fe
SHA256
8d97962170fde92d569335e2885d49926b19b300037ac0948f6dc3857fa4b69f
SHA512
6c5a23bcde8ecbd1a1a505a8b6b9fb133ff627d84ed8449b8b4cb599f08ddefc3d8d868f2e0dc606f180237ec9be6c0931726d1752776798c4728a8572809b79
SSDEEP
192:rIovmbvENg06JN6eqpOowA9s4KHNlb2NfcQn+R6UQZWX5PMYeZXIWY5p1WE57+We:L41Hvq4oxerK2q+P+H0j
Checks for missing Authenticode signature.
resource |
---|
b0f09a706cc2bc1bbaf235abc89d22b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SendMessageA
MessageBeep
GetForegroundWindow
GetClassNameA
wsprintfA
FindWindowExA
CloseHandle
CompareStringA
CreateFileA
CreateThread
DeleteFileA
GetModuleFileNameA
GetSystemDirectoryA
GetSystemTime
GetTickCount
GetWindowsDirectoryA
LocalAlloc
LocalFree
ReadFile
SetFilePointer
SystemTimeToFileTime
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
Sleep
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ