DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f3783e25092e16434acf13a10d107805_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f3783e25092e16434acf13a10d107805_JaffaCakes118
Size
52KB
MD5
f3783e25092e16434acf13a10d107805
SHA1
3544b1cd34f8e1ddbc553f658ea5c0821cf90894
SHA256
cfe3d3b40e6f50ed2bec9fc1fd0922e3b3b5a6ac730da8cdc0cb985b07ccd34b
SHA512
101acf5813fa6d8e89c57a1ab3244fca5c9ce48611d0a9a10da89f6e22ff98c0b1519759565140b33f07ea929f0ebc3760863968923cf72cf9cf753e41af43c0
SSDEEP
768:ggwTW+3ZJLE0qa2ZZ3zyKbMBh8FyTDOxvLLmc1KFJbO4Rf0B:cT7ca2ZZ3z2Bh8FyTDOwc1KDbO4Rf0
Checks for missing Authenticode signature.
resource |
---|
f3783e25092e16434acf13a10d107805_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetShortPathNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
MultiByteToWideChar
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
IsBadCodePtr
SetUnhandledExceptionFilter
HeapSize
RaiseException
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
IsDBCSLeadByte
DisableThreadLibraryCalls
LocalFree
RtlUnwind
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetActiveWindow
SendMessageA
FindWindowExA
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantCopy
VariantChangeType
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ