DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bcd6605d24263f53819fff4f8bf74f6e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bcd6605d24263f53819fff4f8bf74f6e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bcd6605d24263f53819fff4f8bf74f6e_JaffaCakes118
Size
262KB
MD5
bcd6605d24263f53819fff4f8bf74f6e
SHA1
4b7578673e90da52bcddb2fe8535c699d08f76cd
SHA256
a49f83ae8c9073561d922b071f3772c5a5be7fdf7407b489d43d07510f850868
SHA512
8f077363af2c16b6064022613228b6cda24c327b9dc55cce35d4eeacd681a6550e9af97921d343fd31f129a8f54879fd5fc61e5ba70e0d001ffdd5b379457eb9
SSDEEP
6144:iqGaFhtauHuOhSDGluwtJbK2dlScc5WCEKt:HGaFpMDxSbndlG
Checks for missing Authenticode signature.
resource |
---|
bcd6605d24263f53819fff4f8bf74f6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
RtlIpv4StringToAddressW
RtlIpv6StringToAddressW
RtlCompareMemory
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcmpiW
lstrcmpW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
InterlockedExchange
Sleep
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExW
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CreateStreamOnHGlobal
InternetCrackUrlW
InternetCanonicalizeUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ