DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ef50c3f1809ff5df2e935d3e44671878_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef50c3f1809ff5df2e935d3e44671878_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef50c3f1809ff5df2e935d3e44671878_JaffaCakes118
Size
83KB
MD5
ef50c3f1809ff5df2e935d3e44671878
SHA1
344d9835550089ada882f6df767fce78455d47a6
SHA256
6ac29133d2a416ce0e3f49ec5bd81a0079be7abc23d7b46087729b7658d7ad95
SHA512
71aa3ed9cae06a80037c6127c0a4e7da61448f653676fe903c3cc3802d27ab1fb344f6c7761be93650482f8c4452a2fe750055223bdffb25fff3739bd1a1173b
SSDEEP
768:c7rbZOMC8WSatGrqM8MY3TosXKfGmRXO5o:c7rhzDY3TosXKewXOa
Checks for missing Authenticode signature.
resource |
---|
ef50c3f1809ff5df2e935d3e44671878_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
lstrlenA
lstrcmpA
lstrcpyA
GetModuleFileNameA
lstrcatA
GetModuleHandleA
GetVersion
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
MultiByteToWideChar
GetModuleHandleW
GetModuleFileNameW
GetFileAttributesW
LoadLibraryW
CloseHandle
CompareStringA
CreateToolhelp32Snapshot
Process32First
RtlUnwind
GetWindowLongA
RegisterClassA
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
BeginPaint
SetWindowLongA
UnregisterClassA
wsprintfW
CreateWindowExA
ShowWindow
GetClassInfoA
IsWindow
CallWindowProcA
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegDeleteValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegLoadKeyA
RegDeleteKeyA
CoCreateInstance
CoUninitialize
CoInitialize
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ