DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
14e417de633788fc643dc0980280f0b0_JaffaCakes118.dll
Resource
win7-20240611-en
Target
14e417de633788fc643dc0980280f0b0_JaffaCakes118
Size
1.2MB
MD5
14e417de633788fc643dc0980280f0b0
SHA1
48a6196d5215e9ca3d335df28a5399fcb0e0b149
SHA256
0ca0505098c92da00fbf84b7c8ea5bc47c712c8297b5b10ac134bbe7809fc0ea
SHA512
f583accf5e00557605e03a9c07a3a56462973c564eb89dd1ab3fd7744dfd4588364fe01343329d4547392ebd929b97950f2ea539e8b3e928189c4f4f42728b1f
SSDEEP
24576:bQXhwYlFWrIXvKIqT5lh3QstJyTUJ9KtsKwmyERsWZxSz6gqdKyTZFijT:IiCcwtsKwmyksWZxSW7KyTkT
Checks for missing Authenticode signature.
resource |
---|
14e417de633788fc643dc0980280f0b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetCurrentThreadId
CompareStringW
CompareStringA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
LeaveCriticalSection
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetFullPathNameW
InterlockedCompareExchange
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
ExitThread
CreateThread
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeZoneInformation
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
SetEnvironmentVariableA
CharUpperW
wsprintfW
ShowWindow
SetWindowPos
SystemParametersInfoW
SendMessageW
SetWindowLongW
CallWindowProcW
IsWindow
SetWindowTextW
GetWindowLongW
GetWindowTextW
CharLowerW
CoUnmarshalInterface
CoMarshalInterThreadInterfaceInStream
SysFreeString
VariantInit
VarCmp
VariantClear
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ