DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
41da3d26c122d2e266f81298c0e091fe_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41da3d26c122d2e266f81298c0e091fe_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41da3d26c122d2e266f81298c0e091fe_JaffaCakes118
Size
39KB
MD5
41da3d26c122d2e266f81298c0e091fe
SHA1
567742c4d1bfb3158e59cfb2c2ac8fb799ca01e3
SHA256
f5687a65434a41c1b619c4133287e5014b345be76ff8e657d0b769d3d650c489
SHA512
dd330e7f972db4611c00e09cbea11604a5440787b611d34b41cdfc7d5657ef4789a32d730b77de88bb6ee7a78c5ba23776026db79f199d349f7160efa24b24a1
SSDEEP
768:MFaTJJ7LWXXUT0b2HVNwm1R3rIwi8BZHrlTzVS0:M47LAXA0b+VV1pIwnBtlt
Checks for missing Authenticode signature.
resource |
---|
41da3d26c122d2e266f81298c0e091fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAStartup
gethostbyname
htonl
InternetCrackUrlA
MessageBoxA
RtlUnwind
InterlockedIncrement
InterlockedDecrement
FindClose
FindFirstFileA
WritePrivateProfileStringA
GetShortPathNameA
MoveFileExA
GetVersion
GetTickCount
MoveFileA
DeleteFileA
SetFileAttributesA
CopyFileA
GetTempPathA
GetModuleFileNameA
DisableThreadLibraryCalls
WideCharToMultiByte
AreFileApisANSI
InterlockedExchange
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
CloseHandle
VirtualQuery
GetFileSize
CreateFileA
WriteFile
IsBadStringPtrA
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
VirtualProtect
IsBadWritePtr
GetCurrentProcessId
DeleteCriticalSection
SetLastError
GetLastError
InitializeCriticalSection
ReadFile
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
UuidCreate
UuidFromStringA
SHDeleteKeyA
ShellExecuteA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ