DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
094bfe04b5b279e7abe75cd9b29fb50f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
094bfe04b5b279e7abe75cd9b29fb50f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
094bfe04b5b279e7abe75cd9b29fb50f_JaffaCakes118
Size
48KB
MD5
094bfe04b5b279e7abe75cd9b29fb50f
SHA1
5c770da72a1d543fb69864870ab4f914af6c8e52
SHA256
a5e6183a54ea510c864874c5a22be12cf73c1087126dbeb1047c9ef722bd7d18
SHA512
0ac9ef941e407ecb41e24b09f74a247e79cf0a07a4ee2c1978750f1529996933b8a3d457e14c0bcef6a1c3c8a740936b77f0e692391a49f5a7a115e2a911384b
SSDEEP
768:0zweQcP5Uz43ZGHuhjI5F5ifofIhn5fs6IcCRAurfbPfmk7iRvSizFH:0zwzcP5UzmOZ5F5ifofIh1s17Gk7YVzp
Checks for missing Authenticode signature.
resource |
---|
094bfe04b5b279e7abe75cd9b29fb50f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
InitializeCriticalSection
GetLastError
GetCommandLineW
WritePrivateProfileStringA
Process32Next
Process32First
CreateEventA
GetWindowsDirectoryA
GetSystemDirectoryA
Sleep
CreateThread
WideCharToMultiByte
DeleteFileA
GetLocalTime
DisableThreadLibraryCalls
GetCurrentProcessId
LoadLibraryA
GetProcAddress
GetModuleFileNameA
CloseHandle
PostMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
ShowWindow
SendMessageA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
KillTimer
SetTimer
FindWindowExA
SetWindowTextA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
strstr
strcmp
_strlwr
strlen
strchr
fopen
fwrite
free
_initterm
malloc
_adjust_fdiv
_stricmp
rand
fclose
_access
strrchr
memcmp
memcpy
memset
_purecall
strcpy
strcat
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ