DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42983d027d086b8d3d43085dd5d9cedb_JaffaCakes118.dll
Resource
win7-20241010-en
Target
42983d027d086b8d3d43085dd5d9cedb_JaffaCakes118
Size
31KB
MD5
42983d027d086b8d3d43085dd5d9cedb
SHA1
6e056142f828cc0e1e6750ba99f5f6fc344ac13c
SHA256
de00d1882ed356bb829075740eb2b8204f273498b2a2bbc5c7f5826e007bd928
SHA512
b937f2aa284cb5ec540aebea9c855e99831c7600fa1af1d14ddc9dfd80a4dfa3ba090f1156fe34bb05851f9105a2824ce32f044bbd8b8ad4cdcf8ac529bef0e6
SSDEEP
768:Rw3ofVsdp7Fqh4neDysgPJ2obZfC50F7VRJpPB:eoSzMysgP0wpC50FtpP
Checks for missing Authenticode signature.
resource |
---|
42983d027d086b8d3d43085dd5d9cedb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htonl
gethostbyname
WSAStartup
MessageBoxA
GetProcAddress
WriteProcessMemory
GetCurrentProcess
VirtualProtect
InterlockedIncrement
LoadLibraryA
MoveFileExA
MoveFileA
InterlockedDecrement
SetFileAttributesA
WritePrivateProfileStringA
GetShortPathNameA
GetTickCount
CopyFileA
FindClose
FindFirstFileA
GetSystemDirectoryA
GetWindowsDirectoryA
DeleteFileA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
ExpandEnvironmentStringsA
GetVersion
GetModuleFileNameA
DisableThreadLibraryCalls
GetTempPathA
WideCharToMultiByte
AreFileApisANSI
IsBadStringPtrA
IsBadReadPtr
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
ReadFile
WriteFile
CreateFileA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
UuidFromStringA
UuidCreate
SHDeleteKeyA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ