DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
17776a78eedda974732c9593dafdb79a_JaffaCakes118.dll
Resource
win7-20240508-en
Target
17776a78eedda974732c9593dafdb79a_JaffaCakes118
Size
48KB
MD5
17776a78eedda974732c9593dafdb79a
SHA1
4a74882a21e2f43f0c556a527db3ec7eb9101682
SHA256
37a870a802072496fa66cddba266d8e35e571e6d9013c99022f48acdf99b3c4d
SHA512
042d4f53ef8a920805059ed6a96965e6c5b80062d93775b16c73a1c6557aa28dd762a23fab21b1b69c146e89d6724a86e5159487e594ee4cd00d32f20d160502
SSDEEP
768:XobsK9704vq5ebtI7EhbanF08jfgfErV/dy+gaT6ZFAuHbxEPA/kDXO:Q9Dc2tgzn9jf2E1H81EPAOXO
Checks for missing Authenticode signature.
resource |
---|
17776a78eedda974732c9593dafdb79a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddAtomA
CopyFileA
CreateSemaphoreA
DisableThreadLibraryCalls
FindAtomA
FreeLibrary
GetACP
GetAtomNameA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
MultiByteToWideChar
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
lstrlenW
__dllonexit
__mb_cur_max
_assert
_controlfp
_errno
_iob
_isctype
_mkdir
_pctype
_putenv
_snprintf
abort
calloc
exit
fclose
fflush
fopen
fprintf
free
getenv
malloc
memcmp
memset
realloc
strchr
strcmp
strlen
tolower
wcslen
CoCreateInstance
SafeArrayAccessData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantClear
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ