DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ffa001da97c6c9c0f92a4253aefc98be_JaffaCakes118.dll
Resource
win7-20240221-en
Target
ffa001da97c6c9c0f92a4253aefc98be_JaffaCakes118
Size
272KB
MD5
ffa001da97c6c9c0f92a4253aefc98be
SHA1
9c6ec74758a7d772dc4c92e7488600e2fdf1ff89
SHA256
51163084d15032eaa11ce8ee5cc7a2867d81b0775a050e96f561f4ef1b4633af
SHA512
4d209a6c6ee9d78a362ad63d2bc867e3a2c641e9f7d45f952c7676b34757bc4980711b2fdd6b5147814f3ea2d369a6c43b98b83bba338ddb943ffda03509ed4c
SSDEEP
6144:aGHPRvlh3uYDwFtvH/G9p+zk4Xpicawy4J9R9NsdwxUJUSu7Jv3Jg5JgQkdkSuS6:ayJvlh+YDw358
Checks for missing Authenticode signature.
resource |
---|
ffa001da97c6c9c0f92a4253aefc98be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetLastError
RaiseException
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
DisableThreadLibraryCalls
GetModuleFileNameW
GlobalAlloc
CreateThread
Sleep
FormatMessageW
lstrlenW
LocalAlloc
DeleteCriticalSection
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapFree
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetConsoleCP
UnregisterClassA
CharNextW
MessageBoxW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
VariantInit
VariantClear
StrToIntW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ