DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15220f8e36820d61b61a7dd16db16bb1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15220f8e36820d61b61a7dd16db16bb1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
15220f8e36820d61b61a7dd16db16bb1_JaffaCakes118
Size
31KB
MD5
15220f8e36820d61b61a7dd16db16bb1
SHA1
0b0d20e5cfc9041b6ef13203562abfb8682fbf64
SHA256
ec83eb9347022217a160c49bc079def0b60d059c4d624ca0898eebcdd4c5e9ab
SHA512
d1bb019b647c329d8593e6c93e2caec84d909c5a3f618459f60795d0b7c15764b19b442bcc84137a86157fa612858cf68476d1a25e3dd51c0d34d7c9e6281c5e
SSDEEP
384:+khXmpWOFKVZOOFloE+JkgtNclgl5+JBrO+ieGsoanSVWBkc1W/KYJLM:RAIOehvMLtwysJseGqSeGDLM
Checks for missing Authenticode signature.
resource |
---|
15220f8e36820d61b61a7dd16db16bb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynW
InterlockedIncrement
VirtualProtect
SetLastError
LocalAlloc
LocalFree
GetLastError
GetCurrentProcess
CreateFileW
GetFileTime
SetFileTime
GetCurrentThreadId
SetEvent
GetSystemDirectoryW
DeleteFileW
Sleep
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetModuleFileNameW
ExpandEnvironmentStringsW
LoadLibraryW
GetProcAddress
GetModuleHandleA
FreeLibrary
VirtualFree
InterlockedDecrement
PeekMessageW
PostThreadMessageW
CryptDestroyHash
InitializeSecurityDescriptor
BuildExplicitAccessWithNameW
SetEntriesInAclW
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptDestroyKey
CryptReleaseContext
CryptDecrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
RegSetKeySecurity
RegGetKeySecurity
AllocateAndInitializeSid
SetNamedSecurityInfoW
FreeSid
RegCreateKeyExW
RegCloseKey
CommandLineToArgvW
_adjust_fdiv
swprintf
wcscpy
??2@YAPAXI@Z
__CxxFrameHandler
memcmp
memset
memcpy
_snwprintf
wcslen
_wcsicmp
_wcsupr
wcscat
_wtoi
strlen
_onexit
free
malloc
__dllonexit
_initterm
SHSetValueW
SHDeleteValueW
SHGetValueW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ