DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bb28391ca99067559c6596d2e770e02e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb28391ca99067559c6596d2e770e02e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb28391ca99067559c6596d2e770e02e_JaffaCakes118
Size
60KB
MD5
bb28391ca99067559c6596d2e770e02e
SHA1
740bd76c8bd3ab23fbf7c6188e475eb2eb409a0e
SHA256
3a9c6591025b2ed3cce851da2587c0548dc0e303065873b32359d2dac3189dc6
SHA512
07344755c9ab493fbedcd23e637e038d49781b50a275acd30e5bd38f2460d6eb6805bfbe2ac4472f7455fc946d3f29d6acf38b31ed97b24c3453f6d12d94a337
SSDEEP
768:cyDB+uAcV/REhbWkHY9p10+Bl05p/BuPMDde1g3nN/aBj14T22nyQ3W+lOZk:/D8cV/64kHY9puV5p/WMnqyTBlOe
Checks for missing Authenticode signature.
resource |
---|
bb28391ca99067559c6596d2e770e02e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetVersionExA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
FlushFileBuffers
InterlockedDecrement
WideCharToMultiByte
FreeLibrary
GetTickCount
GetLastError
LocalFree
lstrlenA
GlobalAlloc
MultiByteToWideChar
GlobalFree
VirtualProtect
GetLocaleInfoA
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
SysAllocString
VariantClear
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ