DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3f3484bae9d947fe3a417f356554c4d0_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3f3484bae9d947fe3a417f356554c4d0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3f3484bae9d947fe3a417f356554c4d0_JaffaCakes118
Size
92KB
MD5
3f3484bae9d947fe3a417f356554c4d0
SHA1
325f374862f710758364d285926db74d39605a56
SHA256
6b7d3c1719f41ea344831237a18402692b3944e8978552ddfbb8ba4db3e57d38
SHA512
e5c7c81533b5c323dd5d7a4eddfbdec2a4acf27b91308271220af3634c94290a13ef2dc28fd7b97fcd8b29620b8f351a8adc8b1452770f1ac2e609a719d1bae8
SSDEEP
1536:8+WolM2qZX8Q8oj7rTwANoWyuHenrQvSo1TH+I9:pWCM2qZX38wvX+rQvSo1THV9
Checks for missing Authenticode signature.
resource |
---|
3f3484bae9d947fe3a417f356554c4d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
FreeLibrary
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
SizeofResource
LeaveCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
FlushInstructionCache
EnterCriticalSection
lstrlenA
lstrlenW
InterlockedIncrement
lstrcpynA
IsDBCSLeadByte
FlushFileBuffers
RaiseException
GetModuleHandleA
LocalFree
TerminateProcess
LCMapStringW
LCMapStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapSize
InterlockedDecrement
CloseHandle
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
GetOEMCP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
CharNextA
RegQueryValueExA
RegEnumValueA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
RegisterTypeLi
SysAllocString
VarUI4FromStr
SysAllocStringByteLen
DispCallFunc
SysStringByteLen
SysFreeString
VariantChangeType
VariantInit
GetErrorInfo
SysStringLen
VariantClear
LoadRegTypeLi
LoadTypeLi
ima_to_ascii_lz
ima_free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ