DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c0bc6b49f449eafe15ea2fb3c14a4a96_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c0bc6b49f449eafe15ea2fb3c14a4a96_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c0bc6b49f449eafe15ea2fb3c14a4a96_JaffaCakes118
Size
116KB
MD5
c0bc6b49f449eafe15ea2fb3c14a4a96
SHA1
62aa9ccfef045c19d8fbe3c549451a2057c8d1a7
SHA256
5c7ea8e5dcdcc1bcde5e8fcfc886253acf6bfd496d3f5b53e35ded04fdb8c920
SHA512
19ea95d60a2dfb86ea80885db07a64d6f7e282ca86206a5ebc5d6ce0a2c5bc7bc480d1243ebfb458a3d82b63e3400ece2f8a4e1028afea64f4714fbb19038363
SSDEEP
1536:c395XZIcLULq26TtxohYBNxTxKaelcIJCcBIkLjV5By+ULvNsWbr0OP/rEtJWAEN:qHXZI76TvhxT4LtV33klsWBPQt4AEN
Checks for missing Authenticode signature.
resource |
---|
c0bc6b49f449eafe15ea2fb3c14a4a96_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord16
ord18
ord57
ord23
ord15
ord58
ord32
ord30
ord43
ord44
ord21
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
GetSystemDirectoryW
Sleep
lstrcpynW
GetVersionExW
GetComputerNameExW
GetCurrentProcess
FlushInstructionCache
LoadLibraryA
CompareStringW
InterlockedExchange
GetComputerNameW
LocalAlloc
ExpandEnvironmentStringsA
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
ExpandEnvironmentStringsW
SetLastError
GetLastError
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetShortPathNameW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
LocalFree
lstrlenW
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegConnectRegistryW
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
SHBrowseForFolderW
SHGetPathFromIDListW
StringFromGUID2
CoTaskMemAlloc
CoInitializeEx
CoCreateInstanceEx
CoUninitialize
CoCreateGuid
CoSetProxyBlanket
CoTaskMemFree
SysAllocStringByteLen
SysAllocString
LoadRegTypeLi
SysStringLen
SysFreeString
SysStringByteLen
NetUseAdd
NetUseDel
RtlQueryEnvironmentVariable_U
RtlSetEnvironmentVariable
RtlInitUnicodeString
RtlExpandEnvironmentStrings_U
RtlDestroyEnvironment
RtlCreateEnvironment
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ