DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
45937366cc72820c4e307646856fd3b8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45937366cc72820c4e307646856fd3b8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
45937366cc72820c4e307646856fd3b8_JaffaCakes118
Size
262KB
MD5
45937366cc72820c4e307646856fd3b8
SHA1
553a7b9944460c9f4b25e3168befa21c774b52f3
SHA256
bceb4f1f2498312b5a23104bb0ea0746def2d8f013f57d80def32100cc23975c
SHA512
321f288561b3bd7be29e021982cc51b693c008cd8dc804abbf66990b9970d243cfcabd81d14415853f20cc82ea94b1dc829644b905e248a4001684375e79c4bc
SSDEEP
6144:DqGaFhtauHuOhSDGluwtJbK2dlScc5WCEKt:2GaFpMDxSbndlG
Checks for missing Authenticode signature.
resource |
---|
45937366cc72820c4e307646856fd3b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
RtlIpv4StringToAddressW
RtlIpv6StringToAddressW
RtlCompareMemory
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcmpiW
lstrcmpW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
InterlockedExchange
Sleep
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExW
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CreateStreamOnHGlobal
InternetCrackUrlW
InternetCanonicalizeUrlW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ