DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad367e1ccaa7009491dc14a4d7794098_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad367e1ccaa7009491dc14a4d7794098_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad367e1ccaa7009491dc14a4d7794098_JaffaCakes118
Size
28KB
MD5
ad367e1ccaa7009491dc14a4d7794098
SHA1
b0e4215a5e14bc21561ec6cd8fde6428f0c455f2
SHA256
6068c8642e864a5df08537b499ecc92ac85aa6c4a2a921f64299123bb72b028c
SHA512
182dcefc4d97a5ea37dd5ca851174e90f44b176123ff5ee70344185274be41afc553b9b3d977bb29e1c79a59d03d8a971d97792bd1cd876a6c91fdc80aafd75e
SSDEEP
384:YfULgUuaNYbtJ66sV5wKuYs3mBbpZAbz6xkz3mhlpfF:RLgUfYbtJ66srUybpqb+F
Checks for missing Authenticode signature.
resource |
---|
ad367e1ccaa7009491dc14a4d7794098_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
CreateToolhelp32Snapshot
lstrcpyA
Process32Next
CompareStringA
TerminateProcess
OpenProcess
Process32First
LoadLibraryW
GetFileAttributesA
SetFileAttributesA
WinExec
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleHandleA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
RegisterClassA
SetWindowLongA
ShowWindow
DestroyWindow
IsWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
UnregisterClassA
CallWindowProcA
CreateWindowExA
wsprintfW
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ