DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fbf3cad7c5d088eeae247ab62dc2e4e7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fbf3cad7c5d088eeae247ab62dc2e4e7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fbf3cad7c5d088eeae247ab62dc2e4e7_JaffaCakes118
Size
200KB
MD5
fbf3cad7c5d088eeae247ab62dc2e4e7
SHA1
50623c5be53f96f44c98085901ffc4f6084b4d2d
SHA256
7a25a1bd5b94a25b3513b37daafb03d939869e41b1647e75c0f5e9a4fa579452
SHA512
775e1b8d74e254b91493677c00e1e1a04263d6b1bf965c89f4b138fb1f69f95bf7f192eb3caa4c796f9a43cabeb7c91bf99010bb332c914cc49cfc11eb6a2c65
SSDEEP
6144:fCkkc+zwbpRDEE0u4DGAIerYu3IwwipwcrXYND8:fa4pRDF34CNsfpnXYp8
Checks for missing Authenticode signature.
resource |
---|
fbf3cad7c5d088eeae247ab62dc2e4e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStockObject
_adjust_fdiv
malloc
_initterm
free
_mbslen
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
GetProcAddress
GetModuleHandleA
SetEvent
InterlockedDecrement
CloseHandle
WaitForSingleObject
VirtualFreeEx
GetExitCodeThread
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
SetLastError
LocalFree
FormatMessageA
GetLastError
InterlockedIncrement
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
FreeLibrary
DefWindowProcA
GetWindowLongA
SendMessageA
CallWindowProcA
GetWindowThreadProcessId
DestroyWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
SetWindowPos
wsprintfA
IsWindow
SetWindowLongA
PostMessageA
RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegSetValueA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
CoInitialize
CoUninitialize
CoCreateInstance
CoFreeUnusedLibraries
StringFromGUID2
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ