DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a09bfbcac469ccb01588d5dad416e23a_JaffaCakes118.dll
Resource
win7-20240508-en
Target
a09bfbcac469ccb01588d5dad416e23a_JaffaCakes118
Size
413KB
MD5
a09bfbcac469ccb01588d5dad416e23a
SHA1
c3dbbc8bfa5e82622a1a8df01a48c876736b48d5
SHA256
cd777155fcae88b74e97731dc1ee45fc5cf7d81b1b300a4db5483a44316f347f
SHA512
047d0a776cb4dc5e2936337786c4fb63b130bd3203c9a5e02e123d1b162a67097e94d52c138fc6d3775036ad7b4fcb726ed57c767526fb7baffef3e354a58f0e
SSDEEP
6144:65DO2B1UOFn1jK5+ahHCh2soF2tbfNqgCSBKCF4:gDbB17m+2Ch2sPtEOQC
Checks for missing Authenticode signature.
resource |
---|
a09bfbcac469ccb01588d5dad416e23a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreatePropertySheetPageW
DestroyPropertySheetPage
SetupDiDestroyDeviceInfoList
SetupDiGetDevicePropertyW
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoList
InterlockedDecrement
GetDateFormatEx
FileTimeToSystemTime
GetLastError
DisableThreadLibraryCalls
InterlockedIncrement
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
GetModuleFileNameW
GetStringTypeW
MultiByteToWideChar
WriteFile
HeapSize
EnterCriticalSection
GetCurrentThreadId
DecodePointer
GetCommandLineA
RtlUnwind
IsProcessorFeaturePresent
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapAlloc
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
LCMapStringW
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FlushFileBuffers
SetDlgItemTextW
GetDlgItem
SendMessageW
DestroyIcon
MessageBoxA
ShowWindow
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
ord727
ord77
ord155
SHGetItemFromObject
CoTaskMemFree
PropVariantClear
StringFromGUID2
StringFromCLSID
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ