DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb3139a3c62180dec8e9e19035574445_JaffaCakes118.dll
Resource
win7-20240221-en
Target
eb3139a3c62180dec8e9e19035574445_JaffaCakes118
Size
72KB
MD5
eb3139a3c62180dec8e9e19035574445
SHA1
bede77add04ebd3a298322bc080263c41d78ab89
SHA256
6119dccfd9eb38b0cf1839a714a4b65e4a2e7f6e41c37b52c2964a0964f1f87f
SHA512
05f98606cc9bea346c2f03cfa19dea0efb0383ea2fda209c83a30e0f47d3396739f18871bdf843c9d60f6c312892b93247b9d61fa6b92c6c95c427ba4d54f2bd
SSDEEP
1536:PkjQU6zmXrgB/+gyT3PeqAHPoO2Zec4h:8j+urkm1aPoO2
Checks for missing Authenticode signature.
resource |
---|
eb3139a3c62180dec8e9e19035574445_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
CloseHandle
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
GetWindowTextA
SetWindowTextA
FindWindowExA
SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
SysStringLen
LoadRegTypeLi
SysFreeString
ord30
ord58
ord32
ord18
ord15
ord16
ord21
ord57
ord23
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ