DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
52229f87cdf147edd564724452014576_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52229f87cdf147edd564724452014576_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
52229f87cdf147edd564724452014576_JaffaCakes118
Size
25KB
MD5
52229f87cdf147edd564724452014576
SHA1
db6978b82ea3ff6aa0de8267d7be4247fe35cfbb
SHA256
6e3c8bb4c39035f775a97110b1990e2f4b207a8d1016df285e90fda62f60bceb
SHA512
323d5498f8f6728acb673d95fe40caa23668527afb848ed5ffd01ff585ba5405d2a11b2c622f71390c6b15bc02cac2619668fbf1df9e717a8977cdd3f92cd315
SSDEEP
384:6zDHWz21N+TFj3nWNBvnvP+An25Rc09V5vKuub5Kqaq/WBF6xkz3mhlpfreML0:6XWAoknuAnqRc09rdcKqVOBUFJP
Checks for missing Authenticode signature.
resource |
---|
52229f87cdf147edd564724452014576_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetModuleFileNameA
GetModuleHandleW
CreateToolhelp32Snapshot
Process32First
Process32Next
OutputDebugStringA
OpenProcess
TerminateProcess
CloseHandle
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
MultiByteToWideChar
RemoveDirectoryA
PulseEvent
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
lstrcmpA
lstrlenA
RtlUnwind
HeapAlloc
GetProcessHeap
HeapFree
GetClassLongA
GetWindowLongA
IsIconic
CharUpperA
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
ShowWindow
SetWindowLongA
CallWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassA
IsWindow
DestroyWindow
IsWindowUnicode
DeleteObject
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocString
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ