DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
be3243a482747219420bd4aeb4374636_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be3243a482747219420bd4aeb4374636_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
be3243a482747219420bd4aeb4374636_JaffaCakes118
Size
228KB
MD5
be3243a482747219420bd4aeb4374636
SHA1
45260cf1b90310bfc42913d33c3743f0b885bccf
SHA256
902192c0d433b86ae07e6368c962f8304cd2190a137f2658d324fa02e99c64d8
SHA512
7522ea07d8cfadaec00b4eaad3a902a03fd7a8492bd2f21d7f77672fcb7cce5902f182ba8c6d930ec1ef3057836d663a1ca8de1a6ee1fa69ff907fed9060b613
SSDEEP
6144:3a7TRTjIVaR9YVWKIsgMlp71ZpCDRPEs4:3a7TRwaRKgpRx4
Checks for missing Authenticode signature.
resource |
---|
be3243a482747219420bd4aeb4374636_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_stricmp
sprintf
_adjust_fdiv
__dllonexit
realloc
strrchr
_purecall
??3@YAXPAX@Z
__CxxFrameHandler
free
malloc
_vsnprintf
atol
_initterm
_onexit
??2@YAPAXI@Z
strchr
_putenv
printf
GetRunningObjectTable
CreateItemMoniker
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
wsprintfW
CharNextA
GetSystemMetrics
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
GetEnvironmentVariableA
GetProcAddress
IsBadReadPtr
GetCurrentProcessId
SetErrorMode
FreeLibrary
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ