DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2cacf267c4b90f7a5e6bd6cc596c8bc8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2cacf267c4b90f7a5e6bd6cc596c8bc8_JaffaCakes118
Size
63KB
MD5
2cacf267c4b90f7a5e6bd6cc596c8bc8
SHA1
af47d67cef3cdd2d927cdbeabd8a616c08869b37
SHA256
e47d843da74ee63cf79893c38bdfd31d6c9afb5040fc0823000dcfb84c32f8c2
SHA512
0a07f98bdc99d6dd9764598c4870fe88831a3b0cdc967310ee00d3427ff10934d217e68a021855900f57a26037db32f83c547bd61eab04ffbe1a2a5c2bd6a190
SSDEEP
1536:GK5+OyDhQ9KsDcnvOybsY8gQx3JcDq8GiP:p5w2zcBbb8gQx3JcDq8GiP
Checks for missing Authenticode signature.
resource |
---|
2cacf267c4b90f7a5e6bd6cc596c8bc8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegFlushKey
RegQueryValueExA
DeleteCriticalSection
lstrlenW
lstrcatA
lstrlenA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
GetLocalTime
CompareFileTime
lstrcmpA
lstrcpynA
CreateThread
InitializeCriticalSection
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
DisableThreadLibraryCalls
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
DebugBreak
HeapReAlloc
HeapFree
GetSystemDirectoryA
GetUserDefaultLangID
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFile
SetLastError
WaitForMultipleObjects
LocalFree
SetEvent
ResetEvent
SetThreadPriority
ResumeThread
CreateEventA
GetCurrentThreadId
VirtualQuery
VirtualProtect
GetCurrentProcessId
GetDriveTypeA
GetFileAttributesA
UnmapViewOfFile
LoadResource
CreateFileMappingA
StringFromGUID2
CoCreateGuid
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
VariantChangeTypeEx
VariantInit
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VariantClear
GetWindowThreadProcessId
RegisterClassExA
GetWindowLongW
GetWindowLongA
wsprintfA
CharNextA
UnregisterClassA
GetKeyboardType
GetClassInfoExA
DestroyWindow
EnumWindows
PostMessageA
IsWindow
PeekMessageA
GetClassNameA
SetWindowLongW
DefWindowProcW
SetWindowLongA
CallWindowProcW
CallWindowProcA
CreateWindowExA
DefWindowProcA
LoadCursorA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ