DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b99889757f60fdf40aad7b847cc5abf4_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b99889757f60fdf40aad7b847cc5abf4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b99889757f60fdf40aad7b847cc5abf4_JaffaCakes118
Size
48KB
MD5
b99889757f60fdf40aad7b847cc5abf4
SHA1
d68e860c7dc94d33c6457f470a80fed3863084ff
SHA256
96aaafd5df6734f7d2c3b22edc71081bd89f282eb6aac7a4f580cf0ed3dbc161
SHA512
b5b72cab782d015a7cf24907d35eb031800e26661f183a870a5d7c4150e3dcd9f260cda850e5400c828991271faec88710b51f56b2e4651a971cbe8c392d7518
SSDEEP
768:61CjHvAbZI/ipHkp2+msPPUHbrgMJC5lPy32zCXshBFBWYp9fcZLfZp+Pj5HjZ0r:Rikukp2ry0rFQlPy32mshUYp1cJfZp+S
Checks for missing Authenticode signature.
resource |
---|
b99889757f60fdf40aad7b847cc5abf4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
CloseHandle
GetCurrentProcessId
DisableThreadLibraryCalls
WritePrivateProfileStringA
FreeLibrary
LoadLibraryA
GetLocalTime
GetProcAddress
Sleep
CreateThread
WideCharToMultiByte
Process32Next
Process32First
GetWindowsDirectoryA
GetLastError
CreateEventA
GetCommandLineW
GetSystemDirectoryA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
PostMessageA
DefWindowProcA
IsWindow
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
SetWindowTextA
SendMessageA
FindWindowExA
KillTimer
SetTimer
RegisterClassExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
CommandLineToArgvW
CoInitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_strlwr
strchr
fopen
fwrite
fclose
strstr
rand
free
_initterm
malloc
_adjust_fdiv
_stricmp
strcmp
_access
strcpy
memcmp
memcpy
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
strcat
strrchr
strlen
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ