DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2eec07d4f72d1c189161e58ca8732540_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2eec07d4f72d1c189161e58ca8732540_JaffaCakes118
Size
117KB
MD5
2eec07d4f72d1c189161e58ca8732540
SHA1
9841ae1a3c6cfe6f1b98a4d0501b8573bc6f29f3
SHA256
c46f615a75d964684248c133ba1eda96b271cd3cdb4234846737bbcc3318b832
SHA512
8e063a822b7469b6efc1cd62a1e6a4ee2872e8260c9e7f1b07f19cbaeb0c584e6769a611803dd82edfcd2ed1845c6b1435a58787390460ec1e9d224b0aacbcaf
SSDEEP
3072:Ra98ROONoYadq8Gcc5rD96I2rJcl5m9lOM:0GOOSxGxpDMQWlOM
Checks for missing Authenticode signature.
resource |
---|
2eec07d4f72d1c189161e58ca8732540_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
GetModuleFileNameA
CreateMutexA
CreateFileA
WriteFile
FlushFileBuffers
GetFileSize
CreateFileMappingA
GetModuleHandleA
lstrcpyA
RaiseException
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetLastError
GetLocalTime
SystemTimeToFileTime
MultiByteToWideChar
GlobalAlloc
GlobalFree
GetACP
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcatA
QueryPerformanceCounter
SetUnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
SetFilePointer
InterlockedExchange
GetCurrentProcess
OpenFileMappingA
OpenEventA
CloseHandle
OpenMutexA
ResetEvent
SetEvent
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
WaitForSingleObject
LocalFree
lstrlenW
UnhandledExceptionFilter
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeA
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
RtlUnwind
ExitProcess
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
TerminateProcess
TlsAlloc
SetLastError
GetTickCount
CharNextA
RegQueryValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
SHGetFileInfoA
CreateStreamOnHGlobal
StringFromGUID2
CoCreateInstance
StringFromCLSID
CoTaskMemFree
UnRegisterTypeLi
RegisterTypeLi
VariantCopy
DispCallFunc
VariantClear
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantChangeType
SysAllocString
VarUI4FromStr
PathAppendA
PathRemoveFileSpecA
SHDeleteKeyA
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ