DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b494906dc409ecd890ee43f8b5d42c9c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b494906dc409ecd890ee43f8b5d42c9c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b494906dc409ecd890ee43f8b5d42c9c_JaffaCakes118
Size
28KB
MD5
b494906dc409ecd890ee43f8b5d42c9c
SHA1
a7ff841b1add7bfd158fcae3456a5a38001ffecd
SHA256
c2fb67b25d2db564f288d5032f138257f6aaae460829f14e2b2ae960a7ebda49
SHA512
f249dac0acc2c9fc4a3ed5dad130a2f54facdd4bfe9bc834695ea349dcea5ead941e93c2834d68d9ad8ab9abc1f364c52496744909e8466e7b108b9ebfa127da
SSDEEP
384:zyh2QkT2EbtfrC2V5wKutCpcNmb55Caq1B/6xkz3mhlpfxQa:O2QkT2EbtTC2rUtCKN05CV1BSFD
Checks for missing Authenticode signature.
resource |
---|
b494906dc409ecd890ee43f8b5d42c9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
CreateToolhelp32Snapshot
lstrcpyA
Process32Next
CompareStringA
TerminateProcess
OpenProcess
Process32First
LoadLibraryW
GetFileAttributesA
SetFileAttributesA
WinExec
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleHandleA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
lstrlenA
lstrcmpA
RegisterClassA
SetWindowLongA
ShowWindow
DestroyWindow
IsWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
UnregisterClassA
CallWindowProcA
CreateWindowExA
wsprintfW
DeleteObject
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ