DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c25f6632cc977ff9fea661e4fcb533a6_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c25f6632cc977ff9fea661e4fcb533a6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c25f6632cc977ff9fea661e4fcb533a6_JaffaCakes118
Size
52KB
MD5
c25f6632cc977ff9fea661e4fcb533a6
SHA1
d553abf990dfea9a4846ecdc62d3e26da184f429
SHA256
09bb7a689f9a729bb8c7a803d22e8f533b20fbcdd178b48f561a9bb5e7cdbd61
SHA512
90000ca2b138743b932b13ed4f22d8a1e06df69fb6fad16cf5c5407872dd54fa068d98c10eaa7be076485a49e3fd70fbfae7a3f5aeefaf1bf9054a4717fd7944
SSDEEP
1536:dh35hFGOdzMP4H3fdLwW/4mXUt3hy0Jm:brsOdzMP4XNwW/M6Cm
Checks for missing Authenticode signature.
resource |
---|
c25f6632cc977ff9fea661e4fcb533a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Process32Next
Process32First
GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
FreeLibrary
LoadLibraryA
MoveFileA
DeleteFileA
SetFileAttributesA
MultiByteToWideChar
FindNextFileA
FindFirstFileA
GetProcAddress
GetCommandLineW
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
CreateThread
Sleep
WideCharToMultiByte
lstrlenW
lstrlenA
InterlockedIncrement
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcessId
CreateEventA
GetLastError
CloseHandle
FindWindowExA
PostMessageA
IsWindow
CallNextHookEx
SetWindowTextA
SendMessageA
KillTimer
SetTimer
ShowWindow
DefWindowProcA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
CommandLineToArgvW
CoInitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_strlwr
_purecall
rand
memcpy
strcmp
??2@YAPAXI@Z
strchr
free
_initterm
malloc
_adjust_fdiv
_stricmp
memcmp
fopen
fwrite
fclose
strcat
strcpy
_access
strstr
strlen
memset
strrchr
??3@YAXPAX@Z
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ