DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ef4c5475b938009514d467d90f4ac54a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ef4c5475b938009514d467d90f4ac54a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef4c5475b938009514d467d90f4ac54a_JaffaCakes118
Size
104KB
MD5
ef4c5475b938009514d467d90f4ac54a
SHA1
cc29876a028bceb167ea857693e41be8108e8d11
SHA256
0f159e9fc582bec1285b01d2a171a1a62d9c6216eef83649cb426a665b3c33a4
SHA512
9786576e0030cc382df0fd95187cf9dbdbcf0cd3120f65124451ea1f95f30c9bcbba3c707debb048b9ffd4baaf5b34093a4739abde7a42be90c83f1bc0484b79
SSDEEP
1536:UVsIQXsJKXId+L8BCPAV2D05KH4Nu7sSkN1a67QvD5jNDR7kkvrTjXTtvTP6REzZ:0QXXkF7k5D9vv1yRhPqqu
Checks for missing Authenticode signature.
resource |
---|
ef4c5475b938009514d467d90f4ac54a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
GetSystemInfo
HeapCreate
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
DebugBreak
HeapReAlloc
DisableThreadLibraryCalls
HeapAlloc
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringA
lstrcmpiA
LoadLibraryExA
HeapFree
CharNextA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegEnumValueA
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
SysAllocString
VarUI4FromStr
SysFreeString
LoadTypeLi
RegisterTypeLi
memcmp
memset
memcpy
sprintf
wcstombs
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ