DDASQRYhutgyfutrytrwfdrrrrr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9e80c57e3e43b2a848993477c2e87bd8_JaffaCakes118.dll
Resource
win7-20240508-en
Target
9e80c57e3e43b2a848993477c2e87bd8_JaffaCakes118
Size
298KB
MD5
9e80c57e3e43b2a848993477c2e87bd8
SHA1
cefe319e5ed3c28ea808f4b5286df85fbfd227a5
SHA256
9b07e62a1aa6ed1501b0a113b998257d2fe3d7b6ad789e1bb323a23806c7e3de
SHA512
0eedd412fff54716154c435285cd5aa754b9c3f02865b4cbdbb66d15592992d4a336ee770fc29bddd9b22dca12b0752b4895b927628b901fc67a0c8048316c48
SSDEEP
6144:YJ9uIWLsTe291QFETWFqEnc32CrigAlKe2of:ItM2ZrP/of
Checks for missing Authenticode signature.
Processes:
resource |
---|
9e80c57e3e43b2a848993477c2e87bd8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameW
DisableThreadLibraryCalls
ExitProcess
GetLastError
CreateDirectoryW
GetProcAddress
GetModuleHandleW
GetCurrentDirectoryW
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
GetCurrentThreadId
EncodePointer
DecodePointer
RaiseException
HeapFree
SetLastError
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetProcessHeap
IsDebuggerPresent
IsProcessorFeaturePresent
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
CloseHandle
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
CryptAcquireContextA
StringFromGUID2
LoadRegTypeLi
CreateStdDispatch
DDASQRYhutgyfutrytrwfdrrrrr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ