DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fcc8eb5649c0826de0c0e6f39420389c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcc8eb5649c0826de0c0e6f39420389c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fcc8eb5649c0826de0c0e6f39420389c_JaffaCakes118
Size
87KB
MD5
fcc8eb5649c0826de0c0e6f39420389c
SHA1
a6b327494c6b0a9d43a5ccfa4912fd24a4296bf1
SHA256
10d6a6549bdb351b6d8564be03e00d2ed12225e23184aae93fa2ecb929721d29
SHA512
0a95b1d008e60e798b1829148749073518341e0b625d00dca017ce0c5c994058daf6ca01d5e6f186ac2cd73ad13c1f60a0468c6ca7f49ed4dc9953b33e3a8973
SSDEEP
768:ezRZfjOCTNmCus4XKuugG6U3WGmRXxmcdozu27:ez76CpmjXKZJLwXjozu27
Checks for missing Authenticode signature.
resource |
---|
fcc8eb5649c0826de0c0e6f39420389c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
lstrlenA
lstrcpyA
lstrcatA
GetCurrentProcessId
GetVersion
GetModuleFileNameA
OutputDebugStringA
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetFileAttributesW
LoadLibraryW
CloseHandle
CompareStringA
CreateToolhelp32Snapshot
Process32First
RtlUnwind
UnregisterClassA
CallWindowProcA
CharLowerA
EndPaint
DestroyWindow
LoadBitmapA
GetClientRect
SendMessageA
wsprintfW
SetWindowLongA
BeginPaint
GetWindowLongA
CreateWindowExA
ShowWindow
GetClassInfoA
IsWindow
CreateFontA
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
CoInitialize
CoUninitialize
CoCreateInstance
SysAllocString
SysFreeString
TransparentBlt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ