DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb3e2941e2469756e2d5020ccf5761aa_JaffaCakes118.dll
Resource
win7-20240215-en
Target
eb3e2941e2469756e2d5020ccf5761aa_JaffaCakes118
Size
64KB
MD5
eb3e2941e2469756e2d5020ccf5761aa
SHA1
4f55640e2d829ff37c941aefe7870d72c173f542
SHA256
1a564aa67df0762ff4be2a2062faeba262da20c46751f6e7d26815f57f2c181c
SHA512
3865ef2ee1b2e67834c31832be8a6a73a7210626ee7fbf1497a044bea8b046de7f00bc2930185c4753b4659f237e96380f2a6dc373b03a0ca9d06efbe0e47040
SSDEEP
768:jdCImeJH3glafq8+/n+KCOT5adiDQNRj401z/ET2VAvuo6mygV:j9msXgloQ/+KCOT5aYQf4/Wo6d2
Checks for missing Authenticode signature.
resource |
---|
eb3e2941e2469756e2d5020ccf5761aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateThread
lstrcpynA
WideCharToMultiByte
DeleteFileA
GetSystemDirectoryA
MultiByteToWideChar
lstrlenW
GetStringTypeW
GetStringTypeA
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameA
lstrlenA
lstrcpyA
DisableThreadLibraryCalls
LCMapStringA
SetEndOfFile
SetFilePointer
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetLastError
CloseHandle
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
SysFreeString
SysStringLen
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
VariantClear
VariantCopy
VariantChangeType
ord32
ord30
ord58
ord22
ord18
ord15
ord16
ord21
ord23
ord31
closesocket
send
connect
socket
getprotobyname
htons
gethostbyname
inet_addr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ