DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
UTB
Static task
static1
Behavioral task
behavioral1
Sample
0932dbf2c06598a94dbac1f0f2712357_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0932dbf2c06598a94dbac1f0f2712357_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0932dbf2c06598a94dbac1f0f2712357_JaffaCakes118
Size
1.4MB
MD5
0932dbf2c06598a94dbac1f0f2712357
SHA1
dbd685b56fa74e6ee60cca2b2ad1a328dc7a426a
SHA256
ea8781910835c48ffc2d1be848d8c8b85c71492074cb92b6477f80ebbc20b1b0
SHA512
41889c9c314c9ff00800a632f940e740cf1a9e705003f5868db9bcfcde02591f1cfdc6ff751a1284079eeba67aa8d9152dd284db47348265c79ac50e7adb8589
SSDEEP
24576:3O57UCNwpRJf+4Hnz6sJm8ToduZLhNM1Fytv:3O5IC2W4Hz6shTodulM1Etv
Checks for missing Authenticode signature.
resource |
---|
0932dbf2c06598a94dbac1f0f2712357_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
DeleteFileA
CloseHandle
FlushFileBuffers
DebugBreak
HeapAlloc
GetProcessHeap
HeapFree
lstrcatA
GetFileAttributesA
GetDriveTypeA
lstrcpynA
lstrcmpA
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
GetEnvironmentVariableA
GetLastError
CopyFileA
GetModuleFileNameA
CreateFileA
lstrcmpiA
MultiByteToWideChar
lstrlenA
lstrcpyA
lstrlenW
SetEndOfFile
WideCharToMultiByte
SetWindowLongA
PostMessageA
CallWindowProcA
RemovePropA
GetPropA
wsprintfA
SetPropA
RegCloseKey
RegOpenKeyExA
RegFlushKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
CoUninitialize
CLSIDFromProgID
CoCreateInstance
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemRealloc
VariantClear
SysAllocString
SysFreeString
VariantInit
VariantChangeTypeEx
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
UTB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ