DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
cfdd1cc76537cb88565fcd5171bcf781_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cfdd1cc76537cb88565fcd5171bcf781_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cfdd1cc76537cb88565fcd5171bcf781_JaffaCakes118
Size
214KB
MD5
cfdd1cc76537cb88565fcd5171bcf781
SHA1
9df3627825b2a285102b4efa920f4add1ba5e7ce
SHA256
47eb1ccc70d7595938f6eccad78380dff4690e358b236d93d04fbf12f86f0d0a
SHA512
c26c5462e0d677171380c67dd4837f94ab3d3898fc4cb53b496030f023fafcaad5d7847cdb44c6be487b09ac4856fe8e9ef4f33c2b7db894241d824ee2d56a70
SSDEEP
6144:mFHtqID/jQR7TM6cpMl7rlXWoJwj4RBuaABp:mFHtqID7M7TM6AMl3lXWEwdaAP
Checks for missing Authenticode signature.
resource |
---|
cfdd1cc76537cb88565fcd5171bcf781_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetSystemInfo
VirtualQuery
WideCharToMultiByte
lstrlenW
IsDBCSLeadByte
lstrcmpiA
HeapDestroy
CloseHandle
DisableThreadLibraryCalls
CreateMutexA
lstrcatA
lstrcpynA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
VirtualProtect
CreateThread
WriteFile
CreateFileA
CreateFileW
GetVersion
SetFilePointer
ReadFile
GetFileSize
GetModuleHandleA
SetEvent
CreateEventA
CompareStringW
CompareStringA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
lstrlenA
ReleaseMutex
WaitForSingleObject
GetLastError
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
MultiByteToWideChar
GetSystemDefaultLCID
GetModuleHandleW
DeviceIoControl
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
Sleep
GetComputerNameA
LocalFree
LocalAlloc
RegEnumValueW
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
GetUserNameA
CLSIDFromProgID
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoUninitialize
CLSIDFromString
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitializeEx
SysAllocString
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
SysStringLen
SysFreeString
UnregisterClassA
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassA
PostMessageA
UnregisterDeviceNotification
RegisterDeviceNotificationA
LoadStringW
LoadStringA
CharPrevA
CharNextA
DefWindowProcA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceA
SetupDiGetDeviceInterfaceDetailA
WMCreateEditor
??3@YAXPAX@Z
__CxxFrameHandler
wcsncpy
??2@YAPAXI@Z
_wcsicmp
_except_handler3
malloc
free
realloc
_purecall
wcslen
wcscpy
wcscmp
wcsrchr
wcschr
_itoa
strncat
strncpy
_stricmp
atoi
wcsncmp
swprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ