DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ef073cf03164389d93f326e097adf21_JaffaCakes118.dll
Resource
win7-20240220-en
Target
0ef073cf03164389d93f326e097adf21_JaffaCakes118
Size
2.5MB
MD5
0ef073cf03164389d93f326e097adf21
SHA1
66e044a3d31ea3aee3c9660ecbb7974946a57f67
SHA256
db0c6668bf5925d4fa924d19e967de4f41f01e04e94def7b1f534362c04fe1c2
SHA512
d26d84d450f5c138355774392eb860b9f571a076c655dac45dd3b52da333dd5d8bfe05a54387850a7d4a85a8477feeadbc7b96a9aa887c7fc9b4aa463313357a
SSDEEP
49152:m5VJJxdiFb+gVqC/0lrTte+wItvNy/ktAe9lmTYcP73Txp:CJyb+wye2hNy/G
Checks for missing Authenticode signature.
resource |
---|
0ef073cf03164389d93f326e097adf21_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
Sleep
InterlockedIncrement
InterlockedDecrement
GetLastError
GetCurrentThreadId
DisableThreadLibraryCalls
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
WaitForMultipleObjects
WaitForSingleObject
SetLastError
FreeLibrary
ResetEvent
SetEvent
InterlockedExchange
InterlockedExchangeAdd
InterlockedCompareExchange
GetExitCodeThread
TerminateThread
SetThreadPriority
CreateThread
LoadLibraryW
HeapFree
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
HeapSize
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleHandleA
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameW
GetLocaleInfoA
GetStringTypeA
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetEnvironmentVariableA
IsWindow
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
VarBstrCmp
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ