ServiceMain
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d4d6caf72991bfbc28a86db5b461bd8e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4d6caf72991bfbc28a86db5b461bd8e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d4d6caf72991bfbc28a86db5b461bd8e_JaffaCakes118
Size
141KB
MD5
d4d6caf72991bfbc28a86db5b461bd8e
SHA1
056a02f2c9206ab66c3cc60b01bd681544f7f5f1
SHA256
d600d3f09923c5d5c629d76b46ee10571ea0753cb9549168c225fb936d3f1302
SHA512
5c02fb9eea1b00d07e8032823dae97417da3abd5b19f1dc2d07d1736fec6cc5fdcd33548e4131d44cfc12262d46aa9e25fe27f466f44ccf5fbebda0b781ec138
SSDEEP
3072:qszQaPOHAaMvkEkynLXZKDnT5jrzn1IDuGdoMR:qePOPMvk97D9z1idoM
Checks for missing Authenticode signature.
resource |
---|
d4d6caf72991bfbc28a86db5b461bd8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?terminate@@YAXXZ
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
malloc
realloc
free
wcscpy
wcsncpy
wcslen
wcsncat
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_except_handler3
_purecall
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
GetLastError
HeapDestroy
lstrcatW
GetModuleFileNameW
lstrcpynW
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
VirtualAlloc
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
VirtualProtect
lstrlenW
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
MultiByteToWideChar
lstrlenA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
RegisterTypeLi
LoadTypeLi
VarI4FromStr
CharNextW
ServiceMain
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ