DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b0c99070ade3f2dcc3e2f38d3dd36645_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0c99070ade3f2dcc3e2f38d3dd36645_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0c99070ade3f2dcc3e2f38d3dd36645_JaffaCakes118
Size
200KB
MD5
b0c99070ade3f2dcc3e2f38d3dd36645
SHA1
c6c2fa2dd3282ac99baa8d716c13559e3c9695f7
SHA256
81dc6ddb5136326730bb60f6bd5ea5aac3756ea52b6753f6272f1704619ba28a
SHA512
3e83601bf7ae7596873f397025a634b6c02cbdb427563ff757ad7b30693bc8d81203ee87b41113cd411acedc5b4999e3f0e647a6ccce8e12bd3ad314b79bdf8a
SSDEEP
3072:h1K/HDuKZIAX9ZRFkkisbAUZSgdjscn7Sx8dK80RF2EzxgFWg4ormtE9C:SPlX9ZLkkis0GdjtncsKp8mqwImt
Checks for missing Authenticode signature.
resource |
---|
b0c99070ade3f2dcc3e2f38d3dd36645_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetLastError
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
CloseHandle
ReadFile
GetModuleFileNameA
CreateFileA
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
LocalAlloc
InterlockedExchange
GetVersionExA
RaiseException
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetFileSize
CharNextA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
_except_handler3
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
wcslen
wcschr
swprintf
_wsplitpath
_wmakepath
wcscat
free
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ