DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfddeygfhcfgdDDASQEWDAFADSSSSSSSSSZ
Static task
static1
Behavioral task
behavioral1
Sample
861613cdfa40542f4890c5ec8ffa8ea4_JaffaCakes118.dll
Resource
win7-20240419-en
Target
861613cdfa40542f4890c5ec8ffa8ea4_JaffaCakes118
Size
120KB
MD5
861613cdfa40542f4890c5ec8ffa8ea4
SHA1
1dc83b843d335b6e4f6e964739891d11f63f30b0
SHA256
c14f7ece9b6c84d7e81839663fdfcb3cd3eacd06503f02e1cd4ccd9bb90019ca
SHA512
76f355c680b40cef7332bfadd63d4f4e15b65c531b9d445344065c5a0a200210ac8ede75dcdd9852e3b08221c87b8a4cbf57c5e6b6db4164719d6382e7c5ea64
SSDEEP
3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtT:wMZSzSzhA1rwDXnhZCST
Checks for missing Authenticode signature.
Processes:
resource |
---|
861613cdfa40542f4890c5ec8ffa8ea4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DeleteCriticalSection
LeaveCriticalSection
MultiByteToWideChar
EnterCriticalSection
InterlockedDecrement
HeapDestroy
LoadLibraryA
lstrcpyA
lstrcatA
GetPrivateProfileStringA
LocalFree
DebugBreak
HeapReAlloc
HeapFree
GetOEMCP
GetACP
lstrlenW
InitializeCriticalSection
VirtualAlloc
LoadLibraryW
GetProcAddress
HeapCreate
GetSystemInfo
HeapAlloc
InterlockedIncrement
DisableThreadLibraryCalls
LCMapStringW
LCMapStringA
ReadFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
Sleep
InterlockedExchange
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
GetStdHandle
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
GetCPInfo
LoadStringA
CharNextA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA
CoTaskMemFree
CoCreateInstance
ProgIDFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc
SysStringByteLen
SysAllocStringByteLen
CreateErrorInfo
SetErrorInfo
SysAllocStringLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
VariantClear
LoadTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfddeygfhcfgdDDASQEWDAFADSSSSSSSSSZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ