DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d3dc055a901b6ef0bb4d01fdb142cac8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3dc055a901b6ef0bb4d01fdb142cac8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d3dc055a901b6ef0bb4d01fdb142cac8_JaffaCakes118
Size
56KB
MD5
d3dc055a901b6ef0bb4d01fdb142cac8
SHA1
105b6c14ecc409fe245740a8f51da2f6cd0e0240
SHA256
c1881164bb57b58c5fa1a52fe1521c4bd77a6eb5a65713cb88a43735a3eee115
SHA512
b758949d58f8332fc56afb6aa3da9374ece71bde98a9dabd8d92cb110fecafec9f772ad4246febd9f2dbbe51a1054f1e65f08d428ee0fed14d1f5e5728cf8183
SSDEEP
1536:R1eZXCGtiz8vPDf0jmDOrJmQ+oFawa3IF:R1uXCGtiz8vr0j9JmQ+oFawaYF
Checks for missing Authenticode signature.
resource |
---|
d3dc055a901b6ef0bb4d01fdb142cac8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
GetStringTypeA
GetStringTypeW
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
FreeLibrary
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
GetVersionExA
GetFileAttributesA
GetDriveTypeA
lstrcpynA
GetCurrentProcessId
lstrlenW
MultiByteToWideChar
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
HeapCreate
GetShortPathNameA
GetModuleHandleA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
HeapDestroy
CreateEventA
SetLastError
RtlUnwind
DebugBreak
HeapReAlloc
HeapFree
GetCurrentThreadId
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
StringFromGUID2
CoCreateInstance
SysFreeString
VariantChangeTypeEx
RegisterTypeLi
LoadTypeLi
SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
LoadCursorA
GetClassInfoExA
UnregisterClassA
SetWindowLongA
GetWindowLongA
SendMessageA
RegisterClassExA
RegisterWindowMessageA
SendMessageTimeoutA
wsprintfA
GetKeyboardType
FindWindowExA
GetForegroundWindow
CallWindowProcA
CharNextA
SetTimer
KillTimer
DefWindowProcA
DestroyWindow
IsWindow
MoveWindow
MapWindowPoints
GetWindowRect
GetParent
CreateWindowExA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ