DeinitServerExtension
GetExtensionName
InitServerExtension
StagelessInit
_ReflectiveLoader@0
Static task
static1
Behavioral task
behavioral1
Sample
7fc8d48756eea3afa7e3285876bb88c5_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7fc8d48756eea3afa7e3285876bb88c5_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
7fc8d48756eea3afa7e3285876bb88c5_JaffaCakes118
Size
151KB
MD5
7fc8d48756eea3afa7e3285876bb88c5
SHA1
df0529d642e52a85b9c6ba4982ba27c6eda4529e
SHA256
73a79f1e21aba3872db37ea6c22752f62a5b1d1150275f1d20632683a1dd15f4
SHA512
def4017797ca8c7f9a31f4e6362cd9b6838abbe21f410f7bc5a98f08710be423d6083f2e8297d27ec532b07eb9c13b02a896dddcefd3e5385668b96b44633164
SSDEEP
1536:e/dVH0RdAgivQne5Tzz0mrDSbfkepWtcBL6eSsWjcddTd6Z/KaPAKOYIx3jqc61r:e/dmc4ex0AGJWAtQZ/KaPVO2e4
Checks for missing Authenticode signature.
resource |
---|
7fc8d48756eea3afa7e3285876bb88c5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ntohl
QueryPerformanceCounter
LocalFree
LocalAlloc
InterlockedDecrement
GetProcAddress
GetLastError
SetEvent
ResetEvent
CloseHandle
CreateEventA
LoadLibraryA
lstrlenA
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
MultiByteToWideChar
HeapFree
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
RaiseException
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
HeapReAlloc
GetStringTypeW
VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString
DeinitServerExtension
GetExtensionName
InitServerExtension
StagelessInit
_ReflectiveLoader@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ