DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6e2061d50bf9600566fa27ae95c82cc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6e2061d50bf9600566fa27ae95c82cc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f6e2061d50bf9600566fa27ae95c82cc_JaffaCakes118
Size
228KB
MD5
f6e2061d50bf9600566fa27ae95c82cc
SHA1
835fa4d9992ca2ed1c0078f4a41a371222a7dbd7
SHA256
9087524f51be94d7f403c884db0c6e26c4b559b47a8e6b75abfe37a50997df64
SHA512
795d250b14e586b36dadd67a80f9316c993d53455e3395c643ccc67e9f7403fb52ffa78136849e0b0c001ed848c3897d7add787a7b2e2c2228c44be80a039ca5
SSDEEP
6144:2aDdJmCx4VkK+IVaR9YVWKIsgMlp71ZpCDRPEsz:WTV/aRKgpRxz
Checks for missing Authenticode signature.
resource |
---|
f6e2061d50bf9600566fa27ae95c82cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
_adjust_fdiv
free
_initterm
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
wsprintfA
FreeLibrary
GetModuleFileNameA
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
DisableThreadLibraryCalls
GetVersionExA
MultiByteToWideChar
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ