DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e22693dd60eea9976f24b23dd63062c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3e22693dd60eea9976f24b23dd63062c_JaffaCakes118
Size
81KB
MD5
3e22693dd60eea9976f24b23dd63062c
SHA1
657670269390a3d80cf73502d6fd7a4f6a818207
SHA256
04c2d7bd99db0ed8dc4f2339ba4dc4f61ef17f69cb47b85283bf4cde3ac6200a
SHA512
a93aa289d44fe986bfdc4ea21d14ed92ca3e985d42c5439ae93a2d9467031518022dde6b2637f0a71823e5b8b161764281dc53e540fb2f84cc7b74c196654444
SSDEEP
1536:oaqmrJvAGWkS4T8cTO6UligrTejSoeLrluZ2E7/X1nC3:hhrJXhiGeigflo6huEC/X1C3
Checks for missing Authenticode signature.
resource |
---|
3e22693dd60eea9976f24b23dd63062c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
WinExec
GetCurrentThreadId
Sleep
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetLastError
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
SysStringLen
LoadRegTypeLi
SysFreeString
VariantClear
ord30
ord58
ord32
ord57
ord18
ord15
ord16
ord21
ord23
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ