DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bc710a669611b23663f66aed51fe4e0b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc710a669611b23663f66aed51fe4e0b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bc710a669611b23663f66aed51fe4e0b_JaffaCakes118
Size
19KB
MD5
bc710a669611b23663f66aed51fe4e0b
SHA1
c43c79ac93bccca7d400b2a83ddbd6b90b5e46a0
SHA256
f385c8ad5bd300cb48f6984b24988bab2ca11dca266991e0b1f8e037cd5c5a1d
SHA512
0248ead4bfc0dfafc93d36ef7008fb0dea3e45a8795cd60c5c46ee2c15135f91bb148c890e8b2555c3821411355fc29b77ab26ead065041f9960de41d9e1d180
SSDEEP
96:6A9zxNHnXBVRxpB8XJ/hXGKzgqp5Y4Z4AaAU+sBiAk34zF:TvHXS/hXGvqpvZaA5XL3
Checks for missing Authenticode signature.
resource |
---|
bc710a669611b23663f66aed51fe4e0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ShowWindow
SendMessageA
PostMessageA
GetForegroundWindow
GetClassNameA
wsprintfA
FindWindowExA
ShellExecuteA
lstrlenA
ReadFile
lstrcpyA
lstrcmpiA
CloseHandle
CreateFileA
CreateThread
DeleteFileA
GetModuleFileNameA
GetSystemDirectoryA
GetSystemTime
GetTickCount
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
lstrcmpA
SetFilePointer
Sleep
SystemTimeToFileTime
WinExec
WriteFile
lstrcatA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntryA
FindNextUrlCacheEntryA
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ