DllCanUnloadNow
DllGetClassObject
DllGetModuleHandle
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
178a8f7c37fd939d01a024f3dad5750e_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
178a8f7c37fd939d01a024f3dad5750e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
178a8f7c37fd939d01a024f3dad5750e_JaffaCakes118
Size
136KB
MD5
178a8f7c37fd939d01a024f3dad5750e
SHA1
44de5d51e61821af8d2e5dd448c488f7a5f487b7
SHA256
0421a035b71c820b5b1f0cb67e28ce1c7f74ca065e2858de17f5d77b87fbee8f
SHA512
d622e9d8c66246c6e38c54f46ac29ca77231bbc88609709213ebb85bcf28166d8dc1a8734434a0e543d66c03a408796b87bf8e682fa792bcaee34092c323dd21
SSDEEP
3072:K4fxiwGQ/eojOFM0w9VrDq5QgTl+FGd18Zwf4OX:hpGQ/pO29leugQFGd1kwffX
Checks for missing Authenticode signature.
resource |
---|
178a8f7c37fd939d01a024f3dad5750e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
realloc
calloc
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
free
malloc
memcpy
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_stricmp
UnhandledExceptionFilter
GetCurrentDirectoryW
ReadFile
SetFilePointer
CloseHandle
VirtualFree
LoadLibraryA
GetLastError
FreeLibrary
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
HeapAlloc
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
LockResource
LoadResource
SizeofResource
FindResourceW
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
VirtualAlloc
VirtualProtect
GetProcessHeap
HeapFree
DllCanUnloadNow
DllGetClassObject
DllGetModuleHandle
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ