DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
030215576ca9c3c1c16b417fab216c76_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
030215576ca9c3c1c16b417fab216c76_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
030215576ca9c3c1c16b417fab216c76_JaffaCakes118
Size
48KB
MD5
030215576ca9c3c1c16b417fab216c76
SHA1
c2744c9c8d246be03986a00d8414e5d4ab99b505
SHA256
682e601698d3b9df106a2cb6f6ae7f01346db2fbfedccb3d2778e00349556afb
SHA512
429d76e72a2a80652df3eeea0e6fdd065e645e9a0a497a27bbd634db7d542af18ffb77a2a307f4178af36cf8c08396e30b52a288cdab3611bd30f4b70a3b6425
SSDEEP
768:22DG2YAbZ2jKBczDN1Y3yeSDRfpvvmUCcc87vN6map7/mENCWgHM8KHFh9KT:Vi2YiKfzDN1sADJpvvJCcc87vAmadxN6
Checks for missing Authenticode signature.
resource |
---|
030215576ca9c3c1c16b417fab216c76_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
Process32Next
DisableThreadLibraryCalls
WritePrivateProfileStringA
GetLastError
CreateEventA
GetCurrentProcessId
GetCommandLineW
GetSystemDirectoryA
GetLocalTime
FreeLibrary
Sleep
CreateThread
WideCharToMultiByte
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
LoadLibraryA
Process32First
GetProcAddress
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
KillTimer
SetTimer
IsWindow
SetWindowTextA
CreateWindowExA
ShowWindow
PostMessageA
DefWindowProcA
RegisterClassExA
FindWindowExA
SendMessageA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoInitialize
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_strlwr
strcmp
strchr
fopen
fwrite
fclose
strstr
free
_initterm
malloc
_adjust_fdiv
_stricmp
rand
_access
memcmp
memcpy
??2@YAPAXI@Z
_purecall
strcat
strrchr
strlen
memset
strcpy
sprintf
??3@YAXPAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ