DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
dba6309cd9816735f824ef4f33d2edc6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dba6309cd9816735f824ef4f33d2edc6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dba6309cd9816735f824ef4f33d2edc6_JaffaCakes118
Size
177KB
MD5
dba6309cd9816735f824ef4f33d2edc6
SHA1
aa20c865cb62abaaf8bb7fca5e981add74f1ac32
SHA256
dce9e0548f09afac14062addc26b1bfa51767bebf36c8820b3cf167a3c993799
SHA512
2a3874de4ed62d15367fe358a53ae4ba4b204e35c96632d3f367760685232744b12c45e731b82af5c05a51d170dbc3916cb2165d844ff303d4bb85eb319a5e72
SSDEEP
3072:UhND3RW1Mq9rDE3mJ8XOtB6NWzLKg22/dBrJBDdpRWmhBv:c3RW1MqJDQmLtQETzZptB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dba6309cd9816735f824ef4f33d2edc6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryA
DisableThreadLibraryCalls
Sleep
HeapAlloc
GetSystemInfo
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
FreeLibrary
DeleteFileA
LoadLibraryA
lstrcpyA
MultiByteToWideChar
lstrlenA
lstrcatA
WideCharToMultiByte
lstrlenW
GetModuleFileNameA
HeapFree
CreateFileA
WriteFile
GetProcAddress
CloseHandle
CoCreateInstance
ShellExecuteA
CharNextA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE