DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4041e96810581684c6715eb86006b736_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4041e96810581684c6715eb86006b736_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4041e96810581684c6715eb86006b736_JaffaCakes118
Size
40KB
MD5
4041e96810581684c6715eb86006b736
SHA1
80046ed7b4a11c1e98b86b70111eadc30ee7d95d
SHA256
96780ea27df3daf0e83024ca18a41eb7600d6adfb1efc8dc66e3839ddcdabbb5
SHA512
8a0515e6e00f9128c6428368b9c78a3bb95e3cb33157fa006af932fbf4f873478cacf42c8b522b34d1c6875793621c745d4de8d9e341453dcab270f7c50d31c5
SSDEEP
384:YJEtpFvrkUNAhjd/PGLl2B5EjCDr/2M8OAM6kjWwyGlFY75GU+NovzPbD/:MEdNADGLl2B5EjCr/2bOAqFTdazD
Checks for missing Authenticode signature.
resource |
---|
4041e96810581684c6715eb86006b736_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GdipCloneImage
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipGetImageThumbnail
GdipFree
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipDisposeImage
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
SetUnhandledExceptionFilter
OutputDebugStringW
RaiseException
GetVersionExA
IsDebuggerPresent
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetThreadLocale
UnregisterClassA
SHGetPathFromIDListW
CoCreateInstance
ord32
ord64
ord22
ord18
ord15
ord61
ord23
_onexit
__clean_type_info_names_internal
_crt_debugger_hook
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
__CxxFrameHandler3
malloc
?_type_info_dtor_internal_method@type_info@@QAEXXZ
memset
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
free
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ