DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6d0accc87804bc125d886dbf4745d9d_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f6d0accc87804bc125d886dbf4745d9d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f6d0accc87804bc125d886dbf4745d9d_JaffaCakes118
Size
68KB
MD5
f6d0accc87804bc125d886dbf4745d9d
SHA1
c01bc108ff80fed5ab8af66fa9216fb260a8b132
SHA256
247f5e5fa2d1dc65908f3a4ebe3d4fafe8b121dcc2ae8df7c5c69adea9a62670
SHA512
87c00ade852064c16f7a36f5d298cdabe94feacb056d3a2d422057385e34b5e6db4031c723022da78af04cc41bd9d74b37bc0bb556d132629fb0c46f7f3f431c
SSDEEP
768:cEb9bz6L+xEoabujYMwuDtDoE+bxvbkicRNnkR1j2/BaI/iMWvC1tMCfpqH:vb9QEo6R1cnkkRYU2iwtMCfpq
Checks for missing Authenticode signature.
resource |
---|
f6d0accc87804bc125d886dbf4745d9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathAppendW
StrStrIW
SysAllocString
VariantInit
SysFreeString
CoInitializeEx
RegCloseKey
RegCreateKeyExW
RegSetValueExW
SHGetFolderPathW
GetStdHandle
GetLocaleInfoA
GetFileSize
WriteFile
ReadFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ