DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
deef40b6a22cf53d7369b38c4f92d4de_JaffaCakes118.dll
Resource
win7-20240903-en
Target
deef40b6a22cf53d7369b38c4f92d4de_JaffaCakes118
Size
13KB
MD5
deef40b6a22cf53d7369b38c4f92d4de
SHA1
333ce05268d92b0fbdddf9aac477f91b683e690b
SHA256
2d0926630d04f843a4756ec11c79ad4690693ee11ede90242177674e8f4b986e
SHA512
b85a4e072e13f3088af3615d2dfab0c09439ee4e8015e4e998c039ab95206fe8ede6ade3eb8bdf3a5714aed4a2c5ea410d496ed9916c25b00a17f93fff130608
SSDEEP
192:CnUffiU0wjDjJjwzjvjNjxjVjPaZj5ExjUjejpGpZmrr460ZrV0EGBwKFy+f6DRF:+otnFwbh95S1Ewa4FVRKwKQjgITJRFb
Checks for missing Authenticode signature.
resource |
---|
deef40b6a22cf53d7369b38c4f92d4de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemDirectoryW
GetVersionExA
lstrlenW
lstrcpyW
lstrcatW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetProcessHeap
FreeLibrary
ResetEvent
CompareStringW
HeapAlloc
HeapFree
Sleep
RtlUnwind
lstrcmpA
PulseEvent
wsprintfW
CharLowerA
ShowWindow
GetForegroundWindow
IsChild
GetParent
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ