DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterToServer
Static task
static1
Behavioral task
behavioral1
Sample
b27240e017a6c96c61ebb7ef5083a05b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b27240e017a6c96c61ebb7ef5083a05b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b27240e017a6c96c61ebb7ef5083a05b_JaffaCakes118
Size
64KB
MD5
b27240e017a6c96c61ebb7ef5083a05b
SHA1
303e15538c0fc8a914a1f838c165041ab7720b48
SHA256
3ac75ecbde8e79e4cf9b3c1d5e4847d40ccac27624fe00dc04e333ca9e150933
SHA512
9ed0014505b55a99a049fcec26106e6eb943e6cbd92d2973a1e50ad5a611dfdbbb4f78b4084bef2a8a88947bef920783084c9fe3080177e54aaca4242182bdee
SSDEEP
768:0RTaYIM4Wpem4/S2YBTNYub9Xj25j63J0HtDWeQ4lRs:0RTDI4soBTNYubd2o0N7lRs
Checks for missing Authenticode signature.
resource |
---|
b27240e017a6c96c61ebb7ef5083a05b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetVersionExA
CreateFileA
DeviceIoControl
GetLastError
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetStdHandle
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
GetCPInfo
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
ord18
ord15
ord16
ord21
ord57
Netbios
InternetOpenA
InternetOpenUrlA
InternetGetLastResponseInfoA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterToServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ