DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5462d87baab3f6561adbe5d67fdd7df7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5462d87baab3f6561adbe5d67fdd7df7_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5462d87baab3f6561adbe5d67fdd7df7_JaffaCakes118
Size
26KB
MD5
5462d87baab3f6561adbe5d67fdd7df7
SHA1
f55c984d30349cd6d1b2f5e5e637ea71ef01cbbf
SHA256
dd4cc89da672f22eb371a4ffb3f939d264b870c3f944e44ba3eec66fce80caa6
SHA512
3efdc3a3cb80a5c5b4e0c7f0537178f6a24174f91ccd554ed11ba67c803754a942765f24ba0d0ffac793da4720112330f1f1e409465910009739d6c3947c9409
SSDEEP
384:/KqYSnqNzvyboX8V5vKu0W5LFfmWsb5KW6qSBj16xkz3mhlpfw1h:/ESn2zvybhrdH8KW1SBjEFqD
Checks for missing Authenticode signature.
resource |
---|
5462d87baab3f6561adbe5d67fdd7df7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
LoadLibraryA
GetModuleFileNameA
GetModuleHandleW
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleFileNameW
OpenProcess
TerminateProcess
CloseHandle
SetLastError
GetLastError
LoadLibraryW
MultiByteToWideChar
GetCommandLineA
ReadFile
GetProcessHeap
GetVersion
GetFileAttributesW
GetProcAddress
lstrcmpA
lstrlenA
GetModuleHandleA
RtlUnwind
Sleep
HeapAlloc
HeapFree
AnyPopup
CharUpperA
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
SetWindowLongA
CallWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassA
IsWindow
DestroyWindow
ShowWindow
IsIconic
GetWindowLongA
DeleteObject
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CoInitialize
CoCreateInstance
CoUninitialize
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ