DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
16dc340dbc61afa1b05c11f017fb3e3b_JaffaCakes118.dll
Resource
win7-20231129-en
Target
16dc340dbc61afa1b05c11f017fb3e3b_JaffaCakes118
Size
607KB
MD5
16dc340dbc61afa1b05c11f017fb3e3b
SHA1
79241238ab22d3b3ddad2ebc84741d1e92849ba4
SHA256
ffd25320137b455bb15bfa952a901eb6cf7d7808763df0e0fe4be7923060fa80
SHA512
bcb358b59cd86ee051f89770623d767177c2cfe8788cb290fa19214c7183999d554fbad3b64c995de5320a963f2816c34be031fea470f9a76623a90badfc4c90
SSDEEP
12288:lL9vxcX/1hb6GPRHEIB+2W/AzbUEEUDnSJBryZtaLVgfDaVETQTR/CYsg:lcXbeaJg/sbUdcnnQEcTR/CYs
Checks for missing Authenticode signature.
resource |
---|
16dc340dbc61afa1b05c11f017fb3e3b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
CompareStringW
CompareStringA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
LeaveCriticalSection
GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetFullPathNameW
IsValidCodePage
GetOEMCP
InterlockedCompareExchange
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
GetTimeZoneInformation
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetACP
SetEnvironmentVariableA
CharUpperW
SetWindowPos
GetWindowRect
SystemParametersInfoW
SetWindowTextW
wsprintfW
GetWindowTextW
CallWindowProcW
SendMessageW
SetWindowLongW
MoveWindow
GetWindowLongW
CharLowerW
SysStringLen
VariantChangeType
VariantCopy
SysFreeString
VarBstrCmp
VariantInit
VariantClear
SysAllocString
SysAllocStringLen
PathMatchSpecW
PathIsDirectoryW
PathFileExistsW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ