DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
22044787d74d89d59fdbf7fc1e8a078d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22044787d74d89d59fdbf7fc1e8a078d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
22044787d74d89d59fdbf7fc1e8a078d_JaffaCakes118
Size
47KB
MD5
22044787d74d89d59fdbf7fc1e8a078d
SHA1
a5972810b00e8777970380420d2dbb964f9cc03a
SHA256
982f3300a095442d4e94a21200ae5861245c573c877dcb5a4e2c8f02b316f181
SHA512
968b7fc9f045ee3e990b53f19d90036ea725c3e5f4f1e11c4b37de986af1419234b964002c4e4f962f6f2e85a741006f39867ef08be44d0c0c4a66f5dac246c8
SSDEEP
768:HUxrcM4p18HHICRgrIQ3T0vgY4vUPdaCrQ1p4ICQlniM8:HwrcM4p14vOI0TFHAdrEtrlnit
Checks for missing Authenticode signature.
resource |
---|
22044787d74d89d59fdbf7fc1e8a078d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
MultiByteToWideChar
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WideCharToMultiByte
GetVersionExA
CloseHandle
GetCurrentProcess
GetLastError
GetCurrentThread
GetShortPathNameA
GlobalLock
lstrcpynA
lstrcpynW
WinExec
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
HeapDestroy
lstrlenA
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GlobalUnlock
DisableThreadLibraryCalls
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
RtlUnwind
GetCommandLineA
HeapFree
RaiseException
HeapAlloc
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
LoadBitmapA
CharNextA
wsprintfA
InsertMenuA
SetMenuItemBitmaps
SHGetSpecialFolderPathA
DragQueryFileA
AllocateAndInitializeSid
EqualSid
FreeSid
OpenProcessToken
GetTokenInformation
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
OpenThreadToken
CoCreateInstance
ReleaseStgMedium
RegisterTypeLi
SysAllocString
LoadTypeLi
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ