DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fd16a539c47a4ebeef731f89e2feffa7_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fd16a539c47a4ebeef731f89e2feffa7_JaffaCakes118
Size
240KB
MD5
fd16a539c47a4ebeef731f89e2feffa7
SHA1
287e6587740653d0b18f3545c48ae7a78956873a
SHA256
a75029b9f6e89f612be851c7d4812eceaffe9527f532a2a8957b5fa5c4c12b2a
SHA512
d5dcc284e75aabd2cf370432913e091fa6b6b96046f7dab59d82d5b48e7f21dcc4fcef9eff73b2587a1dd3c494a671ac614c3d3f0e5e22b49757d710d643a738
SSDEEP
3072:W+dd6GkN5LbjKAzD6CFg+Hm1ufo7symVc0yq1AHdfmGKiLHZBiHmSpBtQii:Wud6GkjeAzDnnGKiFqKHrLHZBiHfpk
Checks for missing Authenticode signature.
resource |
---|
fd16a539c47a4ebeef731f89e2feffa7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
SetFilePointer
CreateFileW
GetModuleFileNameW
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
CreateThread
LoadLibraryExW
lstrcmpiW
DeleteCriticalSection
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryW
CreateFileA
SetEndOfFile
Sleep
FormatMessageW
lstrlenW
LocalAlloc
LocalFree
OpenEventW
WaitForSingleObject
ResetEvent
FindResourceW
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetStdHandle
GetModuleFileNameA
ExitProcess
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
VirtualFree
HeapDestroy
HeapCreate
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetConsoleCP
UnregisterClassA
MessageBoxW
CharNextW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
VariantInit
UnRegisterTypeLi
RegisterTypeLi
SysStringLen
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
VariantChangeType
VariantClear
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ