DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c762dbc1e5ab12bcfdfa86464b3daf4a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c762dbc1e5ab12bcfdfa86464b3daf4a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c762dbc1e5ab12bcfdfa86464b3daf4a_JaffaCakes118
Size
36KB
MD5
c762dbc1e5ab12bcfdfa86464b3daf4a
SHA1
9d099ca559114a474d54fef22303ac1440a2af55
SHA256
2d22ff093cfc3a803aeca67a543bc841f98c1b96cc354bbd2eb782a46f622d03
SHA512
68a5d4e95b639c0948f1a069351311990ce92fa5a80a0dc4c2f9dc8c2d2289a1c1c3e8357efa0ba047cf05aabf26c4a391af6f0edbc5f032ecf4ea1fdb49e36f
SSDEEP
384:U7/UNQ+rshNnH0PZXmX9pc0UTwuy7JkDic+UgC4vkE/O7shJCyPiFZiQ/P+Qply:S/UNvrssPZ2X80OH48EG7shJCyP0Xlpg
Checks for missing Authenticode signature.
resource |
---|
c762dbc1e5ab12bcfdfa86464b3daf4a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
SetEvent
GetTickCount
CreateEventA
GetUserDefaultLangID
lstrlenW
MultiByteToWideChar
GetShortPathNameA
GetModuleFileNameA
InterlockedIncrement
CloseHandle
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DebugBreak
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
lstrcpynA
GetFileAttributesA
GetDriveTypeA
DeleteCriticalSection
InitializeCriticalSection
VirtualQuery
VirtualProtect
GetModuleHandleA
lstrcmpiA
IsBadReadPtr
GetVersionExA
lstrlenA
InterlockedDecrement
lstrcpyA
wsprintfA
wvsprintfA
FindWindowExA
MsgWaitForMultipleObjects
PeekMessageW
GetDlgItem
CharNextA
TranslateMessage
DispatchMessageA
ShowWindow
DialogBoxParamW
GetWindow
SetForegroundWindow
IsWindow
PostMessageA
RegisterWindowMessageA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegOpenKeyExA
RegCloseKey
StrRChrA
CoUninitialize
CoInitialize
CoCreateInstance
VariantInit
VariantClear
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ