DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b540d1437f9f741ab020034028da1183_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b540d1437f9f741ab020034028da1183_JaffaCakes118
Size
48KB
MD5
b540d1437f9f741ab020034028da1183
SHA1
7c144863c3a2023dd5387bc56acdd84da771377b
SHA256
bef48daf3ea1495d9d2cf4f2fc37cc17a9f269a6afaa6de8b45e2db0e597e4cc
SHA512
4b0c03bdf21b25bac6452b7ae703b368f28de9f97c65bda46f3f2384f34fa2155d213d8c9a219ac8e3ab23e8d434d1f415624135de6aacde0e0afc59a614866a
SSDEEP
192:JWfIegdgGxZ/9DcvoSmlkuUht8CU8NtVSGsH1IPyAzwzkEQ+oa6XY:JjNSakuM8CU8DSH1IWkEQja6I
Checks for missing Authenticode signature.
resource |
---|
b540d1437f9f741ab020034028da1183_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord23
ord21
ord16
ord15
ord18
ord57
ord32
ord58
ord30
ord31
DisableThreadLibraryCalls
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
OutputDebugStringA
Sleep
CreateThread
WideCharToMultiByte
FindWindowExA
SendMessageA
GetForegroundWindow
GetClassNameA
SetWindowTextA
VariantCopy
VariantChangeType
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
SysFreeString
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
strstr
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_mbsstr
_mbslwr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ