DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb69da6cc41ffda6c107f27a7f75eec7_JaffaCakes118.dll
Resource
win7-20240220-en
Target
eb69da6cc41ffda6c107f27a7f75eec7_JaffaCakes118
Size
88KB
MD5
eb69da6cc41ffda6c107f27a7f75eec7
SHA1
262e5b2e290e605d74543832f8985da9979240e8
SHA256
9ff6d5aba471292fe86c3ae931973964056243f9ec82a1dd5cede1a96a86d7d8
SHA512
4f39e5ed0eaf5e3f5e3d109ca8ae96fd74be249e04187dec63ffa45db3fcc9145e7606b384512a481f5d86b64b27f5d4ab2cfb5e5911c82be495528a228c6e93
SSDEEP
1536:W4GriN7ChekjYIXTt48mLVOJYgO6Noeiyg:mriYPJCaYONoe3g
Checks for missing Authenticode signature.
resource |
---|
eb69da6cc41ffda6c107f27a7f75eec7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
lstrlenW
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
EnterCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
GetPrivateProfileIntA
Sleep
GetSystemDirectoryA
GetTickCount
GetLocalTime
CloseHandle
FlushFileBuffers
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcmpiA
HeapDestroy
DisableThreadLibraryCalls
SetStdHandle
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
SetFilePointer
GetCPInfo
WriteFile
GetEnvironmentStringsW
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
FindWindowExA
CharNextA
MessageBoxA
SendMessageA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
VarUI4FromStr
VariantClear
VariantCopy
VariantChangeType
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
PathIsDirectoryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ