DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ce6c29fdab41273aa958fe04faea3fd2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce6c29fdab41273aa958fe04faea3fd2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ce6c29fdab41273aa958fe04faea3fd2_JaffaCakes118
Size
81KB
MD5
ce6c29fdab41273aa958fe04faea3fd2
SHA1
ce67f423ac9c301f9394b6247e0212570917edd8
SHA256
3aa59dd5d799e7bc8efa93ebfb66b11297c892799b3780eddcdf0542bb08ea3b
SHA512
17e6ba07c4fe33410370396504e21aa011ce1933357e6e8d22fb5f752fee25bb54a80ed5f472602f593f965aa94976bf9c540ced7f6e819fc444af72dbdba790
SSDEEP
1536:CdlYjF1Hki0oY5vyolHtRzFAObG0/ZIWcl0TYwTI:ulYjF1EipYJk2HZIWcu
Checks for missing Authenticode signature.
resource |
---|
ce6c29fdab41273aa958fe04faea3fd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
SetEvent
lstrcmpiA
GetLastError
GetModuleFileNameA
lstrlenW
GetModuleHandleA
GetShortPathNameA
lstrlenA
GetPrivateProfileStringA
WritePrivateProfileStringA
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
CreateEventA
CloseHandle
Sleep
WaitForMultipleObjects
MultiByteToWideChar
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
LoadStringA
CoCreateInstance
CoUninitialize
StringFromCLSID
CoInitialize
CoTaskMemFree
SysStringLen
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
UnRegisterTypeLi
LoadRegTypeLi
SysFreeString
COMResModuleInstance
wcslen
wcscpy
__CxxFrameHandler
_purecall
??2@YAPAXI@Z
wcscmp
_wcsicmp
_beginthreadex
_initterm
malloc
_adjust_fdiv
?terminate@@YAXXZ
_except_handler3
??3@YAXPAX@Z
_endthreadex
free
ord58
ord30
ord22
ord18
ord21
ord16
ord32
ord15
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ