DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
36bf98103ca6a4790a9d7a0f79362ecb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
36bf98103ca6a4790a9d7a0f79362ecb_JaffaCakes118
Size
312KB
MD5
36bf98103ca6a4790a9d7a0f79362ecb
SHA1
4c10e78804cdaa3cdaaa9e472e562320d6d94ba6
SHA256
91cf372743543d5a954f2ae3fd4591b3d0e7512460c62972ca00d4253c0fb1d4
SHA512
d974cf3fcf54afd8f92bba3c3d317c79aa092d6d3ff5703de5b9ab0864b340d2e4576fe6d8cd2c2b2155ba0679321c723b2c40d6594dfdf9c6c134fd572429eb
SSDEEP
6144:g4mRohwRLP464abbt5Mueszp1BGW1Vi90eWvnYiRyCrf:VwRr4nabb7resz0W17lRZ
Checks for missing Authenticode signature.
resource |
---|
36bf98103ca6a4790a9d7a0f79362ecb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSection
LeaveCriticalSection
lstrcmpiW
LockResource
GetThreadLocale
SetThreadLocale
MultiByteToWideChar
UpdateResourceW
EndUpdateResourceW
lstrlenA
GetTickCount
GetExitCodeThread
Sleep
TerminateThread
CloseHandle
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameW
RaiseException
GetLastError
WideCharToMultiByte
lstrlenW
FreeLibrary
GetProcAddress
BeginUpdateResourceW
LoadLibraryW
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnregisterClassA
MessageBoxW
PostMessageW
CharNextW
IsTextUnicode
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
CoTaskMemFree
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
RegisterTypeLi
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString
VarUI4FromStr
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantClear
SysAllocStringLen
VarBstrCat
UnRegisterTypeLi
NdrOleFree
NdrStubForwardingFunction
NdrOleAllocate
NdrDllRegisterProxy
NdrDllCanUnloadNow
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
IUnknown_AddRef_Proxy
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ