DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08362395c3afef653d9447e74948c1bf_JaffaCakes118.dll
Resource
win7-20240508-en
Target
08362395c3afef653d9447e74948c1bf_JaffaCakes118
Size
2.5MB
MD5
08362395c3afef653d9447e74948c1bf
SHA1
cb3e1dbacb3b32d6b7b56a339d46b6684be1c6b1
SHA256
c4a2402dadb60c853bb731d419256ac8dc1f8f52770cd29944c1370a6505e0b2
SHA512
9e827ccd48c9aca646d0e8796f089cbfecfeebbeef39a5c04ce8ba631d7010d4a0f5784f608de453318e8743f62d8c57bb41e6643154b59e4621bf450e3c789e
SSDEEP
49152:PlI8IlwgYJZV7TmduLOTBBLY4dOjqgwQNQTHEbXqFP+:9I8iXieduLkS
Checks for missing Authenticode signature.
resource |
---|
08362395c3afef653d9447e74948c1bf_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
WideCharToMultiByte
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetCPInfo
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetStringTypeA
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameW
GetLocaleInfoA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetEnvironmentVariableA
SysStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
UrlCanonicalizeW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ