DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
24d0e575b2366e9984afdc8f39e522a4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
24d0e575b2366e9984afdc8f39e522a4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
24d0e575b2366e9984afdc8f39e522a4_JaffaCakes118
Size
48KB
MD5
24d0e575b2366e9984afdc8f39e522a4
SHA1
fa4270199a7222d63237de01bcad5c10acc1b39d
SHA256
c7ca2ff7c034fbc277664eee58452f70177cfec7cf6ec2ec3d10f71d45719f56
SHA512
2c98178148a51c8c2571cfd4b7e546c428bd4090c33623f8a950510f6e7cdb34dbe8c783803df17dc85612d1909426c4b5f893591ae93dd259aa85ee5c539be7
SSDEEP
768:PQT5OMn7ibKxAPkCC9lLu/LAAlh3WBIbPovZP+25kK8TqmVpzat1mn:PQT4Mn7sEAPTARu/LAAD3WBIbPOYftuy
Checks for missing Authenticode signature.
resource |
---|
24d0e575b2366e9984afdc8f39e522a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
CloseHandle
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetVersionExA
HeapCreate
HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
Process32Next
Process32First
Sleep
CreateThread
WideCharToMultiByte
CreateEventA
InterlockedIncrement
GetModuleFileNameA
WritePrivateProfileStringA
GetLocalTime
LoadLibraryA
GetProcAddress
DeleteFileA
GetSystemInfo
GetCommandLineW
TranslateMessage
DispatchMessageA
SetWindowTextA
SendMessageA
FindWindowExA
SetTimer
PostMessageA
DefWindowProcA
CallNextHookEx
IsWindow
CreateWindowExA
ShowWindow
RegisterClassExA
GetMessageA
KillTimer
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
_purecall
strstr
_strlwr
strchr
fopen
fwrite
fclose
free
_initterm
malloc
_adjust_fdiv
_stricmp
memcmp
rand
strlen
memcpy
strrchr
strcpy
strcat
memset
strcmp
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
_access
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ