DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3eb15016923f57e5e171636523ddf9e0_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3eb15016923f57e5e171636523ddf9e0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3eb15016923f57e5e171636523ddf9e0_JaffaCakes118
Size
21KB
MD5
3eb15016923f57e5e171636523ddf9e0
SHA1
24c4d564d7c04fe931fdd67e5ca495a263931909
SHA256
9f228274131ebd9724257fe530b6c640bf3e240d01206af9a99d8cabd368b5cd
SHA512
c18e609a92d4ec06c6ed6e5bb6715600032ade80f354ed73460429d2d0d4b1e364bb99fef68ba8d811dc94d6231d6163f0cfc85630fc8c04fea2f3622605d90e
SSDEEP
384:CRNVf4mJrwEF94BRvQhPmDoj1soYT4y+5PKSKvuAsCr5Ji9//MmZOwMvOla:CRNpzjkRIhBj1soYa5SRq/NZOt
Checks for missing Authenticode signature.
resource |
---|
3eb15016923f57e5e171636523ddf9e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
InitCommonControlsEx
CloseHandle
CopyFileW
CreateFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetFileAttributesW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetVersionExA
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
DeleteCriticalSection
DisableThreadLibraryCalls
FlushInstructionCache
VirtualProtect
lstrcmpiA
RtlMoveMemory
CoFreeUnusedLibraries
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear
CharLowerBuffA
CharNextA
CharUpperBuffA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ