DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
156401d0030d064e1aa65541c04a0724_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
156401d0030d064e1aa65541c04a0724_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
156401d0030d064e1aa65541c04a0724_JaffaCakes118
Size
68KB
MD5
156401d0030d064e1aa65541c04a0724
SHA1
d8402f0afb4e49ebd6f9fb7027dc3b3aa44161f5
SHA256
12ce3533d6bf0bfe1e5d52b9f8b0f054a5659ac0be55a4e98291168d0209b9c4
SHA512
bf6c56c800ff0dc4e82f0d6a733d16a10079493a105b402af360f4545d4f95e871461f3d47806da964aef8459c84c581d428b9751fb19ef36f1548ac9f56f42f
SSDEEP
768:drmffNXlkEe3v2bwyBb3Ik94aV7zzKnX8+U8vlT4o2U8Ylko8fr:5mXwywypYk94M7zOnZRnlRlk
Checks for missing Authenticode signature.
resource |
---|
156401d0030d064e1aa65541c04a0724_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHRegCreateUSKeyA
SHRegWriteUSValueA
ord1187
ord825
ord535
ord939
ord2818
ord858
ord537
ord540
ord823
ord940
ord665
ord1979
ord6385
ord353
ord5207
ord268
ord389
ord1567
ord6059
ord800
memset
_adjust_fdiv
memcpy
free
realloc
malloc
strlen
sprintf
strncpy
strcat
_itoa
strcpy
wcscmp
_purecall
memcmp
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
_initterm
__CxxFrameHandler
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
GetShortPathNameA
HeapDestroy
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetComputerNameA
GetTempPathA
GetSystemTimeAsFileTime
SystemTimeToFileTime
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
SizeofResource
FreeLibrary
lstrlenW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
DisableThreadLibraryCalls
LoadResource
CharNextA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
ShellExecuteA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
LoadRegTypeLi
SysAllocString
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
VariantClear
SysStringLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ