DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2aaa98df644acd5e9716a2565433f173_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2aaa98df644acd5e9716a2565433f173_JaffaCakes118
Size
376KB
MD5
2aaa98df644acd5e9716a2565433f173
SHA1
80b8a82a5c910fe8fb910247ab71fe2c718d3ba0
SHA256
1a87e68a3ebc15ab5d021dc5a270ebd1dadf67fc7ce09f200a8b681a2965dedd
SHA512
249003e4b3f86120f685ac1061698c402d4e9f39f979ee5346b697e4e5b844c9927dac65218f9067d8609df6abd078c959655980f166b46a93e28e4734578e26
SSDEEP
6144:M0caV3td44ueepI1ZLZ/at80PhKU9xxBEPvH5Bz1b:EUd98pIdatlxxBEH5Bz
Checks for missing Authenticode signature.
resource |
---|
2aaa98df644acd5e9716a2565433f173_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleW
InterlockedDecrement
SizeofResource
LoadResource
GetLastError
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
RaiseException
FreeLibrary
DeleteCriticalSection
InterlockedIncrement
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
SetEndOfFile
WriteConsoleW
MultiByteToWideChar
GlobalAlloc
Sleep
CreateThread
HeapAlloc
lstrlenW
FormatMessageW
HeapFree
lstrcmpiW
GetProcessHeap
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
LoadLibraryA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnregisterClassA
MessageBoxW
CharNextW
ShowWindow
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
CoCreateInstance
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
VariantClear
VariantInit
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ