DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e00c883f4bcc992fed16978936f7e33c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e00c883f4bcc992fed16978936f7e33c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e00c883f4bcc992fed16978936f7e33c_JaffaCakes118
Size
48KB
MD5
e00c883f4bcc992fed16978936f7e33c
SHA1
639aa7c23cc10d998ed681c5175dcdfb7fa21dd6
SHA256
178326e7bc9c24ec30a4475c77826f215ed8d02811aa59ef30fb3034ee237600
SHA512
07aff8f832a544ff95766c28df55a2159d881890137eec1299b9921d2dd72dd30cd014f5fafe531a82ecaddc1f88201185fb2fe5b5ced8c18540cdf9aef014bf
SSDEEP
768:ZvXtjFss9Hl8dkJaAgkzxyuFe1SaPD2MICLYc8wNxRLdy3Ag4Ksq3P4zZTTOFsb1:ZvdjFssRl8uJaUzxneISDrICLv8wNxEG
Checks for missing Authenticode signature.
resource |
---|
e00c883f4bcc992fed16978936f7e33c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
SetFileAttributesA
MultiByteToWideChar
FindNextFileA
FindFirstFileA
GetLocalTime
CreateThread
Sleep
WideCharToMultiByte
lstrlenW
lstrlenA
GetCommandLineW
GetLastError
CreateEventA
GetCurrentProcessId
InterlockedIncrement
MoveFileA
GetWindowsDirectoryA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
WritePrivateProfileStringA
Process32First
Process32Next
CloseHandle
GetModuleFileNameA
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
SendMessageA
PostMessageA
FindWindowExA
CallNextHookEx
CreateWindowExA
ShowWindow
IsWindow
GetMessageA
DispatchMessageA
RegisterClassExA
KillTimer
SetTimer
DefWindowProcA
SetWindowTextA
TranslateMessage
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
CommandLineToArgvW
CoInitialize
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_strlwr
_purecall
strchr
fopen
fwrite
fclose
rand
free
_initterm
malloc
_adjust_fdiv
_stricmp
memcmp
memcpy
strcmp
strstr
strrchr
strcat
_access
strcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
strlen
memset
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ