DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff8fda7b2ed120a9581ccabcdd629356_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ff8fda7b2ed120a9581ccabcdd629356_JaffaCakes118
Size
36KB
MD5
ff8fda7b2ed120a9581ccabcdd629356
SHA1
7bc1fb605d1f1604f58d36b3a15d1866817e4260
SHA256
acda1079bfc450b1e1e06ed9782e382525da1cb19145ddb2e911a4d4fdf623b7
SHA512
4923a2ed63de5dffb258ef7b65eb6ce1352f82f7343199af6b76243204c6d531a30d1531b0a7b570658391dec9917e6e233679b7f61bfc1a0a3a2ec5f474504b
SSDEEP
768:xEJcoJuvflnxc4ShdQxGyZBI0o1C/BLjXo8o74RiRJ:x1Xlna4PxGSBUgJLzoTBRJ
Checks for missing Authenticode signature.
resource |
---|
ff8fda7b2ed120a9581ccabcdd629356_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteKeyA
FreeLibrary
HeapFree
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
GetModuleHandleA
DisableThreadLibraryCalls
LockResource
LoadResource
FindResourceA
CreateThread
Sleep
lstrcatA
HeapReAlloc
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetStdHandle
WideCharToMultiByte
lstrcmpiA
GetModuleFileNameA
lstrlenA
lstrcpyA
GetStringTypeW
GetCurrentThreadId
GetTickCount
GetStringTypeA
GetCurrentProcess
TerminateProcess
VirtualAlloc
VirtualFree
RtlUnwind
TlsSetValue
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SendMessageTimeoutA
GetActiveWindow
wsprintfA
TranslateMessage
DispatchMessageA
EnumChildWindows
RegisterWindowMessageA
GetMessageA
GetWindowTextA
SetWindowTextA
GetClassNameA
GetParent
FindWindowExA
SendMessageA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegSetValueA
CoUninitialize
CoInitialize
SysAllocString
VariantInit
SysFreeString
RpcStringFreeA
UuidToStringA
UuidCreate
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ