DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb326c65ccda783d684e4a5a4b0ce09f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb326c65ccda783d684e4a5a4b0ce09f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb326c65ccda783d684e4a5a4b0ce09f_JaffaCakes118
Size
228KB
MD5
eb326c65ccda783d684e4a5a4b0ce09f
SHA1
efc6f09147da9e020055666b939e1b8ed7452a67
SHA256
3fc4b61a9697088ab121eeec4c0c85985c535cba638ffeafae3faadaad20a159
SHA512
ae484ee39fda648240491b146483196188392938ed076c80715a03b44058963edf4f83a9eb260b2b360df9c1d89c3e9a29e26a8ac8a8b71d33467d55db6e2e0e
SSDEEP
3072:s498DvHgc6iXtHjwqPHerFRQZup/5XYeZYgRm/QTfrmQamYGKdcGvvh:5GDv76idHZPHKqZuh5oCYB/wrUXdc2v
Checks for missing Authenticode signature.
resource |
---|
eb326c65ccda783d684e4a5a4b0ce09f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
sprintf
strtoul
_itoa
_stricmp
free
malloc
memmove
_strupr
_initterm
_adjust_fdiv
_except_handler3
RegDeleteValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
IsWindow
SetTimer
KillTimer
GetWindowThreadProcessId
DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
MoveWindow
CreateWindowExA
RegisterClassExA
SendMessageA
LocalFree
SetErrorMode
MoveFileExA
FindResourceA
DisableThreadLibraryCalls
Thread32Next
OpenThread
Thread32First
CreateToolhelp32Snapshot
OpenProcess
InitializeCriticalSection
CreateEventA
ExpandEnvironmentStringsA
lstrcpyA
SizeofResource
LoadResource
LockResource
FreeResource
CreateThread
FreeLibrary
SetEvent
ResumeThread
VirtualAllocEx
lstrcpynA
WriteProcessMemory
GetThreadContext
SetThreadContext
TerminateProcess
ExitThread
LocalAlloc
IsBadReadPtr
VirtualFree
CloseHandle
WriteFile
CreateFileA
VirtualAlloc
ReadFile
GetFileSize
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
lstrcatA
GetWindowsDirectoryA
FindClose
DeleteFileA
FindNextFileA
FindFirstFileA
lstrlenA
GetTempFileNameA
Sleep
lstrcmpiA
MapViewOfFile
CreateFileMappingA
GetVolumeInformationA
GetSystemDirectoryA
IsBadWritePtr
LoadLibraryA
WideCharToMultiByte
ExitProcess
lstrcmpA
SetFilePointer
VirtualProtect
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
GetLastError
CreateMutexA
GetProcAddress
SetUnhandledExceptionFilter
ResetEvent
LeaveCriticalSection
WaitForSingleObject
EnterCriticalSection
CreateProcessA
GetStartupInfoA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ