DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2900fb1020802697eafe7ed205019344_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2900fb1020802697eafe7ed205019344_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2900fb1020802697eafe7ed205019344_JaffaCakes118
Size
48KB
MD5
2900fb1020802697eafe7ed205019344
SHA1
6acc3efe834cccd69177db39f5cf7f42a5096517
SHA256
1821ce5014f9c7201b707820cc655547bb81d26a14b4d3cf922c25c6e3ca13d9
SHA512
1deca3e14f2377ea56990821a0ae67d2d7dc293485fa733c884d39783a9dea31e98dd140e2aac48cd3f560b04b13fb20bea03f410bff163223509c772a060ac0
SSDEEP
768:5J2KeQF2U2Tj4kb/9p1AjA3SFmg4iTE1wglyL4P4fZOP2lToZNXxMml9lZQh9:r29TU2Tjllp1AUAmziglyMPu+BZNXlTY
Checks for missing Authenticode signature.
resource |
---|
2900fb1020802697eafe7ed205019344_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
CloseHandle
GetLastError
CreateEventA
DeleteFileA
GetLocalTime
InterlockedIncrement
DisableThreadLibraryCalls
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
GetCommandLineW
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentProcessId
WritePrivateProfileStringA
InitializeCriticalSection
GetModuleFileNameA
PostMessageA
DefWindowProcA
CreateWindowExA
ShowWindow
RegisterClassExA
CallNextHookEx
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
SendMessageA
FindWindowExA
IsWindow
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CommandLineToArgvW
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_purecall
rand
_strlwr
memcpy
strrchr
strcmp
strstr
free
_initterm
malloc
_adjust_fdiv
_stricmp
memcmp
strcpy
??2@YAPAXI@Z
strchr
fopen
fwrite
fclose
??3@YAXPAX@Z
strcat
_access
sprintf
memset
strlen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ