?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3f7354e820561ba9e30473dc165557a4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f7354e820561ba9e30473dc165557a4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3f7354e820561ba9e30473dc165557a4_JaffaCakes118
Size
564KB
MD5
3f7354e820561ba9e30473dc165557a4
SHA1
269f092d8a32114e75c68bbd5a694559ad727124
SHA256
7a7b843334557d9ad33b5d9056176a3dd39e0069940542a23f105fd6d079121f
SHA512
f329cee184abe66aaa9d6dc1f1067f264728eb58ddb6a44f0c6c1a9d8bff7b57ca79647c4bccc10a9abbc5f1954fd13e493c2b6188fa64d49da2aa8dad8ad0e0
SSDEEP
6144:/EwFcbpSzJksKYfvR6tvjRxBkViLDbkUT0casYk92BS+Oqq+denzqyJUQzn6C:ctpJsKYutkViDkk/aM2BPhduOU
Checks for missing Authenticode signature.
resource |
---|
3f7354e820561ba9e30473dc165557a4_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryW
ClearEventLogW
GetTitleBarInfo
StrRetToBSTR
StrRStrIW
StrRetToStrW
StrChrIW
?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ