DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
adf77ce5a84d5bf12788f41a4b76a77a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
adf77ce5a84d5bf12788f41a4b76a77a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
adf77ce5a84d5bf12788f41a4b76a77a_JaffaCakes118
Size
68KB
MD5
adf77ce5a84d5bf12788f41a4b76a77a
SHA1
17d6565bc0e0833c8da45c8847d1d5075433ce6d
SHA256
38249c204fd70bbf05fbf49addc617e6193dbf14118c9dda703c8cff2d255f3a
SHA512
0d5f5f6187d510b9b2fc13f74fc9fd7a6ff34ba50d3024b4a35d02d65202ebdda10f9f6e99246b54070fddea142208833b1178cae69a3d3c59b0795e4d65b9e5
SSDEEP
1536:UZ+AcpxnFxP3M0SGa5tRkGIxyELyjyGH8Pf/yTG:7tPHOjxCyTG
Checks for missing Authenticode signature.
resource |
---|
adf77ce5a84d5bf12788f41a4b76a77a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CopyFileA
CreateFileA
GetSystemDirectoryA
DeleteFileA
GetModuleFileNameA
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
CloseHandle
lstrlenA
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetTempFileNameA
GetTempPathA
GetLocalTime
MultiByteToWideChar
LocalFree
GetLastError
WideCharToMultiByte
lstrlenW
HeapDestroy
lstrcpyA
CharNextA
MessageBoxA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
ShellExecuteA
CoCreateInstance
SafeArrayCreateVector
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
URLDownloadToFileA
_stricmp
??1type_info@@UAE@XZ
_onexit
__dllonexit
_adjust_fdiv
_initterm
_CxxThrowException
wcslen
fseek
ftell
rewind
_itoa
fread
realloc
memcmp
memcpy
_purecall
fopen
abs
??3@YAXPAX@Z
strstr
memset
strlen
??2@YAPAXI@Z
strcat
strcpy
strcmp
free
malloc
fclose
strncpy
fgets
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ