DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
19c0a5af4a5391612917e9e77397ea6c_JaffaCakes118.dll
Resource
win7-20240220-en
Target
19c0a5af4a5391612917e9e77397ea6c_JaffaCakes118
Size
607KB
MD5
19c0a5af4a5391612917e9e77397ea6c
SHA1
661e00bd3191b9632ea58f0dd9f15bb6a87afd7e
SHA256
59601d9129ef2dea08d68483d2f666888a80ae1bb01554ffe1be36047a64bf7b
SHA512
9fd18c4f352ec892eae42625f40846f18babd5290a7f4068b255e3c8701d6a19521c4feca9df077776e0911d8b4f82c5ca7730db0323350e14972bf570bde312
SSDEEP
12288:3PI1KOu2dtbApZGlcysV6QbqbHoRYJGuFb8YtpsbO2iZfi2VkWQTR3FM6ltwEmV1:/+KOuMkbG+yI6Ge8u18YBkzTR3W6W
Checks for missing Authenticode signature.
resource |
---|
19c0a5af4a5391612917e9e77397ea6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
CompareStringW
CompareStringA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
LeaveCriticalSection
GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetFullPathNameW
IsValidCodePage
GetOEMCP
InterlockedCompareExchange
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
GetTimeZoneInformation
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetACP
SetEnvironmentVariableA
CharUpperW
SetWindowPos
GetWindowRect
SystemParametersInfoW
SetWindowTextW
wsprintfW
GetWindowTextW
CallWindowProcW
SendMessageW
SetWindowLongW
MoveWindow
GetWindowLongW
CharLowerW
SysStringLen
VariantChangeType
VariantCopy
SysFreeString
VarBstrCmp
VariantInit
VariantClear
SysAllocString
SysAllocStringLen
PathMatchSpecW
PathIsDirectoryW
PathFileExistsW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ